The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-92727: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 3, 2026
CVE-2026-17508: Allocation of Resources Without Limits or ThrottlingN/A5.3 Medium0%Oct 2, 2026
CVE-2026-94620: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.4 Critical0%Oct 1, 2026
CVE-2026-94053: Improper Neutralization of Special Elements used in an LDAP Query9.1 CriticalN/A0%Sep 30, 2026
CVE-2026-94052: Missing Critical Step in Authentication9.1 CriticalN/A0%Sep 30, 2026
CVE-2026-94029: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Sep 30, 2026
CVE-2026-94002: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Sep 30, 2026
CVE-2026-93996: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Sep 30, 2026
CVE-2026-93995: Improper Input Validation6.5 MediumN/A0%Sep 30, 2026
CVE-2026-93994: Missing Critical Step in Authentication8.1 HighN/A0%Sep 30, 2026
CVE-2026-77185: Authentication Bypass by Primary Weakness9.1 CriticalN/A0%Sep 30, 2026
CVE-2026-102826: Improper Neutralization of Special Elements used in a Command8.1 HighN/A0%Sep 29, 2026
CVE-2026-102825: Improper Restriction of Excessive Authentication Attempts3.7 LowN/A0%Sep 29, 2026
CVE-2026-102824: Use of a Broken or Risky Cryptographic Algorithm4.3 MediumN/A0%Sep 29, 2026
CVE-2026-102823: Improper Input Validation7.5 HighN/A0%Sep 29, 2026
CVE-2026-102822: Improper Validation of Array Index3.7 LowN/A0%Sep 29, 2026
CVE-2026-102821: Uncontrolled Resource Consumption6.5 MediumN/A0%Sep 29, 2026
CVE-2026-102820: Out-of-bounds Read6.2 MediumN/A0%Sep 29, 2026
CVE-2026-22094: Use of Weak CredentialsN/A9.3 Critical0%Sep 29, 2026
CVE-2026-91085: Missing Authorization6.3 MediumN/A0%Sep 29, 2026
CVE-2026-82932: Improper Restriction of Communication Channel to Intended EndpointsN/A5.3 Medium0%Sep 28, 2026
CVE-2026-82929: Use of Hard-coded Cryptographic KeyN/A6.3 Medium0%Sep 28, 2026
CVE-2026-82928: Inclusion of Undocumented Features or Chicken BitsN/A7.7 High0%Sep 28, 2026
CVE-2026-100713: Time-of-check Time-of-use (TOCTOU) Race Condition7.8 High7.1 High0%Sep 26, 2026
CVE-2026-95835: Missing AuthorizationN/A5.6 Medium0%Sep 25, 2026
126-150 of 2138
‹›