The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116370: Access of Resource Using Incompatible Type10.0 Critical2.1 Low0%Oct 26, 2026
CVE-2026-115913: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Oct 26, 2026
CVE-2026-115912: Deserialization of Untrusted Data8.8 HighN/A0%Oct 26, 2026
CVE-2026-115911: Uncontrolled Resource Consumption6.5 MediumN/A0%Oct 26, 2026
CVE-2026-115910: Insufficient Verification of Data Authenticity6.8 MediumN/A0%Oct 26, 2026
CVE-2026-115909: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 26, 2026
CVE-2026-115908: Improper Limitation of a Pathname to a Restricted Directory7.4 HighN/A0%Oct 26, 2026
CVE-2026-115907: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 26, 2026
CVE-2026-115906: Improper Validation of Integrity Check Value6.5 MediumN/A0%Oct 26, 2026
CVE-2026-115905: Improper Input ValidationN/A10.0 Critical0%Oct 26, 2026
CVE-2026-115598: Missing Authorization5.3 MediumN/A0%Oct 26, 2026
CVE-2026-115597: Missing Authorization5.4 MediumN/A0%Oct 26, 2026
CVE-2026-115418: Improper Neutralization of Special Elements used in an SQL Command7.3 High7.0 High0%Oct 26, 2026
CVE-2026-114710: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 26, 2026
CVE-2026-107091: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-106677: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-106676: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2013-10077: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium5.5 Medium0%Oct 26, 2026
CVE-2026-93846: Incorrect Authorization3.8 LowN/A0%Oct 26, 2026
CVE-2026-85297: Generation of Predictable Numbers or IdentifiersN/A7.7 High0%Oct 26, 2026
CVE-2026-65226: Undefined Security WeaknessN/AN/AN/AOct 26, 2026
CVE-2026-65222: Undefined Security WeaknessN/AN/AN/AOct 26, 2026
CVE-2026-65221: Undefined Security WeaknessN/AN/AN/AOct 26, 2026
CVE-2026-65218: Undefined Security WeaknessN/AN/AN/AOct 26, 2026
CVE-2026-65217: Undefined Security WeaknessN/AN/AN/AOct 26, 2026
2026-2050 of 416436