The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-110926: Observable Discrepancy5.3 MediumN/A0%Oct 15, 2026
CVE-2026-110925: Improper Neutralization of Special Elements used in an OS Command5.4 MediumN/A0%Oct 15, 2026
CVE-2026-110923: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Oct 15, 2026
CVE-2026-76667: Out-of-bounds Read5.7 MediumN/A0%Oct 15, 2026
CVE-2026-76666: Out-of-bounds Read4.7 MediumN/A0%Oct 15, 2026
CVE-2026-76665: Out-of-bounds Read7.1 HighN/A0%Oct 15, 2026
CVE-2026-3712: Server-Side Request Forgery (SSRF)7.3 HighN/A0%Oct 15, 2026
CVE-2026-14572: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2026
CVE-2026-108587: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Oct 15, 2026
CVE-2026-93484: Improper Neutralization of Special Elements used in an SQL CommandN/A8.6 High0%Oct 15, 2026
CVE-2026-93483: Use of Less Trusted SourceN/A9.5 Critical0%Oct 15, 2026
CVE-2026-76664: Out-of-bounds Read6.4 MediumN/A0%Oct 15, 2026
CVE-2026-110912: Improper Handling of Length Parameter InconsistencyN/A7.1 High0%Oct 15, 2026
CVE-2026-110911: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Oct 15, 2026
CVE-2026-76663: Stack-based Buffer Overflow7.5 HighN/A0%Oct 15, 2026
CVE-2026-76662: Stack-based Buffer Overflow5.9 MediumN/A0%Oct 15, 2026
CVE-2026-110909: Improper Restriction of Communication Channel to Intended Endpoints5.0 MediumN/A0%Oct 15, 2026
CVE-2026-110908: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A6%Oct 15, 2026
CVE-2026-110907: Incorrect Resource Transfer Between Spheres7.5 HighN/A0%Oct 15, 2026
CVE-2026-77931: Undefined Security Weakness8.8 High8.7 High1%Oct 15, 2026
CVE-2026-76661: Improper Input Validation7.6 HighN/A0%Oct 15, 2026
CVE-2026-76660: Improper Input Validation8.7 HighN/A0%Oct 15, 2026
CVE-2026-76659: Missing Authentication for Critical Function7.5 HighN/A0%Oct 15, 2026
CVE-2026-76656: Missing Authentication for Critical Function5.3 MediumN/A0%Oct 15, 2026
CVE-2026-76066: Missing Authorization7.5 High8.7 High0%Oct 15, 2026
2051-2075 of 409174
‹›