The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-90885: Improper Restriction of XML External Entity Reference7.5 HighN/A1%Oct 26, 2026
CVE-2026-77062: Improper Restriction of Rendered UI Layers or FramesN/A6.9 Medium1%Oct 26, 2026
CVE-2026-77061: Missing Authentication for Critical FunctionN/A5.3 Medium0%Oct 26, 2026
CVE-2026-77060: Incorrect Permission Assignment for Critical ResourceN/A6.8 Medium0%Oct 26, 2026
CVE-2026-77059: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A8.8 High0%Oct 26, 2026
CVE-2026-77058: Cross-Site Request Forgery (CSRF)N/A5.1 Medium0%Oct 26, 2026
CVE-2026-77057: Improper Restriction of Excessive Authentication AttemptsN/A2.3 Low0%Oct 26, 2026
CVE-2026-77056: Use of Default CredentialsN/A7.1 High0%Oct 26, 2026
CVE-2026-77055: Incorrect Privilege AssignmentN/A9.3 Critical0%Oct 26, 2026
CVE-2026-77054: Cleartext Storage of Sensitive InformationN/A6.9 Medium0%Oct 26, 2026
CVE-2026-77053: Missing Authentication for Critical FunctionN/A8.7 High0%Oct 26, 2026
CVE-2026-77052: Missing Authentication for Critical FunctionN/A8.7 High0%Oct 26, 2026
CVE-2026-65184: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A0%Oct 26, 2026
CVE-2026-3322: Improper Handling of Insufficient Permissions or PrivilegesN/A5.6 Medium0%Oct 26, 2026
CVE-2026-36698: Undefined Security WeaknessN/AN/A1%Oct 26, 2026
CVE-2026-31158: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-116497: NULL Pointer Dereference5.5 MediumN/A0%Oct 26, 2026
CVE-2026-116340: Authorization Bypass Through User-Controlled Key4.3 Medium2.1 Low0%Oct 26, 2026
CVE-2026-116339: Incomplete List of Disallowed Inputs7.3 High5.5 Medium0%Oct 26, 2026
CVE-2026-116284: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Oct 26, 2026
CVE-2026-115930: Improper Certificate Validation6.8 Medium7.6 High0%Oct 26, 2026
CVE-2026-112345: Use of Hard-coded Cryptographic Key8.1 High8.6 High0%Oct 26, 2026
CVE-2026-110748: Improper Limitation of a Pathname to a Restricted DirectoryN/AN/A0%Oct 26, 2026
CVE-2026-110733: Improper Neutralization of Special Elements used in an SQL Command5.4 MediumN/A0%Oct 26, 2026
CVE-2026-106781: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
2101-2125 of 417776