The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-77059: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A8.8 High0%Oct 26, 2026
CVE-2026-77058: Cross-Site Request Forgery (CSRF)N/A5.1 Medium0%Oct 26, 2026
CVE-2026-77057: Improper Restriction of Excessive Authentication AttemptsN/A2.3 Low0%Oct 26, 2026
CVE-2026-77056: Use of Default CredentialsN/A7.1 High0%Oct 26, 2026
CVE-2026-77055: Incorrect Privilege AssignmentN/A9.3 Critical0%Oct 26, 2026
CVE-2026-77054: Cleartext Storage of Sensitive InformationN/A6.9 Medium0%Oct 26, 2026
CVE-2026-77053: Missing Authentication for Critical FunctionN/A8.7 High0%Oct 26, 2026
CVE-2026-77052: Missing Authentication for Critical FunctionN/A8.7 High0%Oct 26, 2026
CVE-2026-65184: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A0%Oct 26, 2026
CVE-2026-3322: Improper Handling of Insufficient Permissions or PrivilegesN/A5.6 Medium0%Oct 26, 2026
CVE-2026-36698: Undefined Security WeaknessN/AN/A1%Oct 26, 2026
CVE-2026-31158: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-116497: NULL Pointer Dereference5.5 MediumN/A0%Oct 26, 2026
CVE-2026-116340: Authorization Bypass Through User-Controlled Key4.3 Medium2.1 Low0%Oct 26, 2026
CVE-2026-116339: Incomplete List of Disallowed Inputs7.3 High5.5 Medium0%Oct 26, 2026
CVE-2026-116284: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Oct 26, 2026
CVE-2026-115930: Improper Certificate Validation6.8 Medium7.6 High0%Oct 26, 2026
CVE-2026-112345: Use of Hard-coded Cryptographic Key8.1 High8.6 High0%Oct 26, 2026
CVE-2026-110748: Improper Limitation of a Pathname to a Restricted DirectoryN/AN/A0%Oct 26, 2026
CVE-2026-110733: Improper Neutralization of Special Elements used in an SQL Command5.4 MediumN/A0%Oct 26, 2026
CVE-2026-106781: Undefined Security WeaknessN/AN/A0%Oct 26, 2026
CVE-2026-97200: Improper Handling of Highly Compressed Data (Data Amplification)N/A8.2 High1%Oct 26, 2026
CVE-2026-59107: Only Filtering Special Elements at an Absolute Position9.8 Critical9.2 Critical0%Oct 26, 2026
CVE-2026-59106: Improper Neutralization of Special Elements used in an OS Command9.8 Critical9.3 Critical1%Oct 26, 2026
CVE-2026-116516: Improper Check for Unusual or Exceptional Conditions6.5 MediumN/A0%Oct 26, 2026
2101-2125 of 416436