The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-115914: Reachable Assertion6.5 MediumN/A0%Oct 26, 2026
CVE-2026-115804: Authorization Bypass Through User-Controlled Key6.4 MediumN/A0%Oct 26, 2026
CVE-2026-112839: Missing Authorization4.3 MediumN/A0%Oct 26, 2026
CVE-2026-111404: Concurrent Execution using Shared Resource with Improper Synchronization3.7 LowN/A0%Oct 26, 2026
CVE-2026-10757: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Oct 26, 2026
CVE-2026-105765: Missing Authorization7.5 HighN/A0%Oct 26, 2026
CVE-2026-105626: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Oct 26, 2026
CVE-2026-105608: Improper Handling of Case Sensitivity8.8 HighN/A0%Oct 26, 2026
CVE-2026-102649: Missing Authentication for Critical Function9.9 CriticalN/A0%Oct 26, 2026
CVE-2026-82390: Concurrent Execution using Shared Resource with Improper Synchronization3.7 LowN/A0%Oct 26, 2026
CVE-2026-82389: NULL Pointer Dereference6.5 MediumN/A0%Oct 26, 2026
CVE-2026-82388: Use After Free5.3 MediumN/A0%Oct 26, 2026
CVE-2026-81039: Missing Release of Resource after Effective Lifetime4.3 MediumN/A0%Oct 26, 2026
CVE-2026-81038: Reachable Assertion7.1 HighN/A0%Oct 26, 2026
CVE-2026-71456: Use of Hard-coded Cryptographic KeyN/A8.5 High0%Oct 26, 2026
CVE-2026-71455: Cleartext Storage of Sensitive Information in MemoryN/A5.3 Medium0%Oct 26, 2026
CVE-2026-19742: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)3.7 LowN/A0%Oct 26, 2026
CVE-2026-116612: Improper Control of Dynamically-Managed Code Resources7.8 HighN/A0%Oct 26, 2026
CVE-2026-116596: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-116403: Concurrent Execution using Shared Resource with Improper Synchronization5.9 MediumN/A0%Oct 26, 2026
CVE-2026-116396: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 26, 2026
CVE-2026-116395: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 26, 2026
CVE-2026-116388: Missing Authorization5.3 MediumN/A0%Oct 26, 2026
CVE-2026-116384: Improper Authorization6.3 Medium2.1 Low0%Oct 26, 2026
CVE-2026-116371: Improper Authentication6.3 Medium5.3 Medium0%Oct 26, 2026
2001-2025 of 416436