The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116153: Integer Overflow or Wraparound2.5 Low2.0 Low0%Oct 25, 2026
CVE-2026-116152: Missing Release of Memory after Effective Lifetime5.3 Medium6.9 Medium0%Oct 25, 2026
CVE-2026-116151: Missing Release of Memory after Effective Lifetime3.7 Low6.3 Medium0%Oct 25, 2026
CVE-2026-116150: Missing Release of Memory after Effective Lifetime3.1 Low2.3 Low0%Oct 25, 2026
CVE-2026-116149: Stack-based Buffer Overflow8.1 High7.2 High0%Oct 25, 2026
CVE-2026-116148: Improper Neutralization of Input During Web Page Generation3.6 Low4.8 Medium0%Oct 25, 2026
CVE-2026-116147: NULL Pointer Dereference3.7 Low6.3 Medium0%Oct 25, 2026
CVE-2026-116146: Missing Release of Memory after Effective Lifetime3.7 Low6.3 Medium0%Oct 25, 2026
CVE-2026-116145: Protection Mechanism Failure3.9 Low1.8 Low0%Oct 25, 2026
CVE-2026-116144: Uncontrolled Recursion3.3 Low4.8 Medium0%Oct 25, 2026
CVE-2026-116143: Allocation of Resources Without Limits or Throttling3.3 Low4.8 Medium0%Oct 25, 2026
CVE-2026-116142: Out-of-bounds Read3.3 Low4.8 Medium0%Oct 25, 2026
CVE-2026-116141: Uncontrolled Resource Consumption5.3 Medium6.9 Medium0%Oct 25, 2026
CVE-2026-116140: Incorrect Authorization3.3 Low4.8 Medium0%Oct 25, 2026
CVE-2026-116139: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 25, 2026
CVE-2026-116053: Improper Neutralization of Special Elements used in an OS Command5.3 Medium1.9 Low1%Oct 25, 2026
CVE-2026-116052: Cross-Site Request Forgery (CSRF)4.3 Medium5.3 Medium0%Oct 25, 2026
CVE-2026-116137: Interpretation Conflict3.7 Low6.3 Medium0%Oct 25, 2026
CVE-2026-116136: Incorrect Authorization5.9 Medium6.0 Medium0%Oct 25, 2026
CVE-2026-116073: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium6.9 Medium0%Oct 25, 2026
CVE-2026-116072: Cross-Site Request Forgery (CSRF)5.4 Medium5.3 Medium0%Oct 25, 2026
CVE-2026-116071: Use of Password Hash With Insufficient Computational Effort5.9 Medium8.2 High0%Oct 25, 2026
CVE-2026-116070: Missing Authentication for Critical Function6.5 Medium6.9 Medium0%Oct 25, 2026
CVE-2026-116069: Server-Side Request Forgery (SSRF)6.5 Medium6.9 Medium0%Oct 25, 2026
CVE-2026-116068: Authorization Bypass Through User-Controlled Key8.8 High8.7 High0%Oct 25, 2026
2376-2400 of 416436