The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-106632: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-106631: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-106630: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Oct 13, 2026
CVE-2026-106629: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Oct 13, 2026
CVE-2026-106628: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-92922: Improper Neutralization of Input During Web Page Generation8.1 HighN/A1%Oct 13, 2026
CVE-2026-92911: Improper Neutralization of Input During Web Page Generation8.7 HighN/A1%Oct 13, 2026
CVE-2026-91013: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Oct 13, 2026
CVE-2026-84994: Uncaught ExceptionN/A8.7 High1%Oct 13, 2026
CVE-2026-110239: Improper Neutralization of Input During Web Page Generation4.4 Medium2.1 Low0%Oct 13, 2026
CVE-2026-110224: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 13, 2026
CVE-2026-110221: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 13, 2026
CVE-2026-110219: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 13, 2026
CVE-2026-104937: Undefined Security Weakness8.1 HighN/A1%Oct 13, 2026
CVE-2026-100133: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Oct 13, 2026
CVE-2026-110101: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 13, 2026
CVE-2026-104250: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 13, 2026
CVE-2026-49264: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 13, 2026
CVE-2026-102672: Time-of-check Time-of-use (TOCTOU) Race Condition6.7 MediumN/A0%Oct 13, 2026
CVE-2026-102342: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109960: Improper Neutralization of Input During Web Page Generation7.7 High8.7 High0%Oct 13, 2026
CVE-2026-109761: Use After Free5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109749: Use After Free5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109748: Use After Free5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109733: Access of Resource Using Incompatible Type8.1 HighN/A0%Oct 13, 2026
176-200 of 10616