The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-115966: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 26, 2026
CVE-2026-115923: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Oct 26, 2026
CVE-2026-115922: Memory Allocation with Excessive Size Value6.2 MediumN/A0%Oct 26, 2026
CVE-2026-115921: Signed to Unsigned Conversion Error6.2 MediumN/A0%Oct 26, 2026
CVE-2026-115920: Out-of-bounds Read6.2 MediumN/A0%Oct 26, 2026
CVE-2026-115919: Out-of-bounds Read6.2 MediumN/A0%Oct 26, 2026
CVE-2026-115918: Uncontrolled Resource Consumption6.5 MediumN/A0%Oct 26, 2026
CVE-2026-115917: Permissive Cross-domain Policy with Untrusted Domains4.7 MediumN/A0%Oct 26, 2026
CVE-2026-115916: Improper Validation of Array Index6.5 MediumN/A0%Oct 26, 2026
CVE-2026-115915: Improper Input Validation9.8 CriticalN/A1%Oct 26, 2026
CVE-2026-115914: Reachable Assertion6.5 MediumN/A0%Oct 26, 2026
CVE-2026-115804: Authorization Bypass Through User-Controlled Key6.4 MediumN/A0%Oct 26, 2026
CVE-2026-112839: Missing Authorization4.3 MediumN/A0%Oct 26, 2026
CVE-2026-111404: Concurrent Execution using Shared Resource with Improper Synchronization3.7 LowN/A0%Oct 26, 2026
CVE-2026-10757: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Oct 26, 2026
CVE-2026-105765: Missing Authorization7.5 HighN/A0%Oct 26, 2026
CVE-2026-105626: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Oct 26, 2026
CVE-2026-105608: Improper Handling of Case Sensitivity8.8 HighN/A0%Oct 26, 2026
CVE-2026-102649: Missing Authentication for Critical Function9.9 CriticalN/A0%Oct 26, 2026
CVE-2026-82390: Concurrent Execution using Shared Resource with Improper Synchronization3.7 LowN/A0%Oct 26, 2026
CVE-2026-82389: NULL Pointer Dereference6.5 MediumN/A0%Oct 26, 2026
CVE-2026-82388: Use After Free5.3 MediumN/A0%Oct 26, 2026
CVE-2026-81039: Missing Release of Resource after Effective Lifetime4.3 MediumN/A0%Oct 26, 2026
CVE-2026-81038: Reachable Assertion7.1 HighN/A0%Oct 26, 2026
CVE-2026-71456: Use of Hard-coded Cryptographic KeyN/A8.5 High0%Oct 26, 2026
1976-2000 of 416436