The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-76664: Out-of-bounds Read6.4 MediumN/A0%Oct 15, 2026
CVE-2026-110912: Improper Handling of Length Parameter InconsistencyN/A7.1 High0%Oct 15, 2026
CVE-2026-110911: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Oct 15, 2026
CVE-2026-93483: Use of Less Trusted SourceN/A9.5 Critical0%Oct 15, 2026
CVE-2026-76663: Stack-based Buffer Overflow7.5 HighN/A0%Oct 15, 2026
CVE-2026-76662: Stack-based Buffer Overflow5.9 MediumN/A0%Oct 15, 2026
CVE-2026-110909: Improper Restriction of Communication Channel to Intended Endpoints5.0 MediumN/A0%Oct 15, 2026
CVE-2026-110908: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A6%Oct 15, 2026
CVE-2026-77931: Undefined Security Weakness8.8 High8.7 High1%Oct 15, 2026
CVE-2026-76661: Improper Input Validation7.6 HighN/A0%Oct 15, 2026
CVE-2026-76660: Improper Input Validation8.7 HighN/A0%Oct 15, 2026
CVE-2026-76659: Missing Authentication for Critical Function7.5 HighN/A0%Oct 15, 2026
CVE-2026-76656: Missing Authentication for Critical Function5.3 MediumN/A0%Oct 15, 2026
CVE-2026-76066: Missing Authorization7.5 High8.7 High0%Oct 15, 2026
CVE-2026-73799: Stack-based Buffer Overflow7.5 HighN/A0%Oct 15, 2026
CVE-2026-110904: Incorrect Authorization5.3 MediumN/A0%Oct 15, 2026
CVE-2026-109430: Improper Restriction of XML External Entity Reference7.5 High8.7 High0%Oct 15, 2026
CVE-2026-110907: Incorrect Resource Transfer Between Spheres7.5 HighN/A0%Oct 15, 2026
CVE-2026-110810: Out-of-bounds Read2.8 Low0.9 Low0%Oct 15, 2026
CVE-2026-0993: Buffer Copy without Checking Size of Input7.5 High8.7 High0%Oct 15, 2026
CVE-2026-110809: Improper Resource Shutdown or Release4.3 Medium2.1 Low0%Oct 15, 2026
CVE-2026-106706: Undefined Security Weakness5.4 MediumN/A0%Oct 15, 2026
CVE-2026-106708: Undefined Security Weakness8.8 HighN/A0%Oct 15, 2026
CVE-2026-110873: Incorrect Authorization7.1 High7.1 High0%Oct 14, 2026
CVE-2026-110872: Uncontrolled Resource Consumption5.9 Medium8.2 High0%Oct 14, 2026
2026-2050 of 409174
‹›