The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116178: Improper Input Validation7.5 High8.2 High0%Oct 25, 2026
CVE-2026-116177: Uncontrolled Resource Consumption7.5 High8.7 High0%Oct 25, 2026
CVE-2026-116176: Server-Side Request Forgery (SSRF)8.2 High8.8 High0%Oct 25, 2026
CVE-2026-116175: Improper Handling of Highly Compressed Data (Data Amplification)6.5 Medium7.1 High0%Oct 25, 2026
CVE-2026-116174: Improper Input Validation7.5 High8.2 High0%Oct 25, 2026
CVE-2026-116173: Improper Input Validation7.5 High8.2 High0%Oct 25, 2026
CVE-2026-116172: Improper Input Validation7.5 High8.2 High0%Oct 25, 2026
CVE-2026-116171: Improper Limitation of a Pathname to a Restricted Directory4.4 Medium5.9 Medium1%Oct 25, 2026
CVE-2026-116170: Improper Neutralization of Special Elements used in an SQL Command4.9 Medium6.9 Medium0%Oct 25, 2026
CVE-2026-116169: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 25, 2026
CVE-2026-116168: Improper Limitation of a Pathname to a Restricted Directory6.2 Medium6.9 Medium0%Oct 25, 2026
CVE-2026-116167: Improper Neutralization of Input During Web Page Generation6.8 Medium7.6 High0%Oct 25, 2026
CVE-2026-116166: Cleartext Transmission of Sensitive Information6.8 Medium7.6 High0%Oct 25, 2026
CVE-2026-116165: Missing AuthorizationN/A8.8 High0%Oct 25, 2026
CVE-2026-116164: Improper Input ValidationN/A6.3 Medium0%Oct 25, 2026
CVE-2026-116163: Improper Authentication7.4 High9.1 Critical0%Oct 25, 2026
CVE-2026-116162: Improper Privilege ManagementN/A2.1 Low0%Oct 25, 2026
CVE-2026-116161: Exposure of Sensitive Information to an Unauthorized ActorN/A6.0 Medium0%Oct 25, 2026
CVE-2026-116160: Heap-based Buffer Overflow3.3 Low4.8 Medium0%Oct 25, 2026
CVE-2026-116159: Missing Release of Memory after Effective Lifetime3.3 Low4.8 Medium0%Oct 25, 2026
CVE-2026-116158: Missing Release of Memory after Effective Lifetime2.5 Low2.0 Low0%Oct 25, 2026
CVE-2026-116157: Missing Release of Memory after Effective Lifetime3.3 Low4.8 Medium0%Oct 25, 2026
CVE-2026-116156: Missing Release of Memory after Effective Lifetime3.3 Low4.8 Medium0%Oct 25, 2026
CVE-2026-116155: Missing Release of Memory after Effective Lifetime5.3 Medium6.9 Medium0%Oct 25, 2026
CVE-2026-116154: Missing Release of Memory after Effective Lifetime5.3 Medium6.9 Medium0%Oct 25, 2026
2351-2375 of 416436