The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-71455: Cleartext Storage of Sensitive Information in MemoryN/A5.3 Medium0%Oct 26, 2026
CVE-2026-19742: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)3.7 LowN/A0%Oct 26, 2026
CVE-2026-116612: Improper Control of Dynamically-Managed Code Resources7.8 HighN/A0%Oct 26, 2026
CVE-2026-116596: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-116403: Concurrent Execution using Shared Resource with Improper Synchronization5.9 MediumN/A0%Oct 26, 2026
CVE-2026-116396: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 26, 2026
CVE-2026-116395: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 26, 2026
CVE-2026-116388: Missing Authorization5.3 MediumN/A0%Oct 26, 2026
CVE-2026-116384: Improper Authorization6.3 Medium2.1 Low0%Oct 26, 2026
CVE-2026-116371: Improper Authentication6.3 Medium5.3 Medium0%Oct 26, 2026
CVE-2026-116370: Access of Resource Using Incompatible Type10.0 Critical2.1 Low0%Oct 26, 2026
CVE-2026-115913: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Oct 26, 2026
CVE-2026-115912: Deserialization of Untrusted Data8.8 HighN/A0%Oct 26, 2026
CVE-2026-115911: Uncontrolled Resource Consumption6.5 MediumN/A0%Oct 26, 2026
CVE-2026-115910: Insufficient Verification of Data Authenticity6.8 MediumN/A0%Oct 26, 2026
CVE-2026-115909: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 26, 2026
CVE-2026-115908: Improper Limitation of a Pathname to a Restricted Directory7.4 HighN/A0%Oct 26, 2026
CVE-2026-115907: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 26, 2026
CVE-2026-115906: Improper Validation of Integrity Check Value6.5 MediumN/A0%Oct 26, 2026
CVE-2026-115905: Improper Input ValidationN/A10.0 Critical0%Oct 26, 2026
CVE-2026-115598: Missing Authorization5.3 MediumN/A0%Oct 26, 2026
CVE-2026-115597: Missing Authorization5.4 MediumN/A0%Oct 26, 2026
CVE-2026-115418: Improper Neutralization of Special Elements used in an SQL Command7.3 High7.0 High0%Oct 26, 2026
CVE-2026-114710: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 26, 2026
CVE-2026-107091: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
2001-2025 of 416436