The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-112343: Improper Resolution of Path Equivalence8.1 High8.6 High0%Oct 26, 2026
CVE-2026-107090: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-107080: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-99099: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-99098: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-99097: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-99096: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-99095: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-99094: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-99093: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-99092: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-99091: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-99090: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-99089: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-99088: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-94386: Use of Cache Containing Sensitive Information4.8 MediumN/A0%Oct 26, 2026
CVE-2026-93850: Improper Handling of Highly Compressed Data (Data Amplification)6.5 MediumN/A0%Oct 26, 2026
CVE-2026-93849: Memory Allocation with Excessive Size Value6.5 MediumN/A0%Oct 26, 2026
CVE-2026-93848: Server-Side Request Forgery (SSRF)2.7 LowN/A0%Oct 26, 2026
CVE-2026-93847: Incorrect Authorization3.5 LowN/A0%Oct 26, 2026
CVE-2026-93328: Missing AuthorizationN/A9.3 Critical1%Oct 26, 2026
CVE-2026-92171: Invocation of Process Using Visible Sensitive Information6.5 MediumN/A0%Oct 26, 2026
CVE-2026-90885: Improper Restriction of XML External Entity Reference7.5 HighN/A1%Oct 26, 2026
CVE-2026-77062: Improper Restriction of Rendered UI Layers or FramesN/A6.9 Medium1%Oct 26, 2026
CVE-2026-77061: Missing Authentication for Critical FunctionN/A5.3 Medium0%Oct 26, 2026
2076-2100 of 416436