The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-112260: Out-of-bounds Read7.1 HighN/A0%Oct 19, 2026
CVE-2026-112259: NULL Pointer Dereference5.5 MediumN/A0%Oct 19, 2026
CVE-2026-112252: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 19, 2026
CVE-2026-112251: URL Redirection to Untrusted Site4.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-110688: Inefficient Algorithmic ComplexityN/AN/A0%Oct 19, 2026
CVE-2026-110687: Improper Handling of Unicode EncodingN/AN/A0%Oct 19, 2026
CVE-2026-110686: Use After FreeN/AN/A0%Oct 19, 2026
CVE-2026-110685: Missing Release of Memory after Effective LifetimeN/AN/A0%Oct 19, 2026
CVE-2026-110684: Missing Release of Memory after Effective LifetimeN/AN/A0%Oct 19, 2026
CVE-2026-110682: Interpretation ConflictN/AN/A0%Oct 19, 2026
CVE-2026-110681: Use After FreeN/AN/A0%Oct 19, 2026
CVE-2026-110680: Out-of-bounds WriteN/AN/A0%Oct 19, 2026
CVE-2026-110678: Allocation of Resources Without Limits or ThrottlingN/AN/A0%Oct 19, 2026
CVE-2026-110677: Missing Release of Memory after Effective LifetimeN/AN/A0%Oct 19, 2026
CVE-2026-110676: Asymmetric Resource Consumption (Amplification)N/AN/A0%Oct 19, 2026
CVE-2026-110675: Improper Validation of Syntactic Correctness of InputN/AN/A0%Oct 19, 2026
CVE-2026-110674: Access of Resource Using Incompatible TypeN/AN/A0%Oct 19, 2026
CVE-2026-110673: Uncontrolled RecursionN/AN/A0%Oct 19, 2026
CVE-2026-110672: Missing Release of Memory after Effective LifetimeN/AN/A0%Oct 19, 2026
CVE-2026-109437: Initialization of a Resource with an Insecure Default9.8 Critical9.2 Critical1%Oct 19, 2026
CVE-2026-109434: User Interface (UI) Misrepresentation of Critical Information4.3 Medium5.1 Medium0%Oct 19, 2026
CVE-2025-60482: Undefined Security WeaknessN/AN/A0%Oct 19, 2026
CVE-2026-6719: Use of Insufficiently Random Values7.5 HighN/A0%Oct 19, 2026
CVE-2026-55644: Improper Input ValidationN/A5.1 Medium0%Oct 19, 2026
CVE-2026-4418: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Oct 19, 2026
2276-2300 of 417319
‹›