The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-112199: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 19, 2026
CVE-2026-112142: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 19, 2026
CVE-2026-112141: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 19, 2026
CVE-2026-111845: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-111839: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-111836: Missing Authorization4.3 MediumN/A0%Oct 19, 2026
CVE-2026-111831: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-111414: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 19, 2026
CVE-2026-111410: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 19, 2026
CVE-2026-110363: Missing Authorization5.4 MediumN/A0%Oct 19, 2026
CVE-2026-88900: Deserialization of Untrusted Data8.8 HighN/A0%Oct 19, 2026
CVE-2026-112210: Improper Link Resolution Before File Access6.0 MediumN/A0%Oct 19, 2026
CVE-2026-112140: Improper Control of Generation of Code6.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-112139: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 19, 2026
CVE-2026-112138: Improper Limitation of a Pathname to a Restricted Directory4.7 Medium2.0 Low0%Oct 19, 2026
CVE-2026-112108: Buffer Copy without Checking Size of Input6.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-112107: Buffer Copy without Checking Size of Input6.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-103314: Authentication Bypass by Capture-replay7.4 HighN/A0%Oct 19, 2026
CVE-2026-91858: Improper Restriction of XML External Entity Reference6.5 MediumN/A0%Oct 19, 2026
CVE-2026-88901: Improper Restriction of XML External Entity Reference8.2 HighN/A1%Oct 19, 2026
CVE-2026-85317: Use of Cache Containing Sensitive Information4.8 MediumN/A0%Oct 19, 2026
CVE-2026-85316: Insufficient Granularity of Access Control4.8 MediumN/A0%Oct 19, 2026
CVE-2026-85315: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Oct 19, 2026
CVE-2026-85314: Improper Input Validation6.5 MediumN/A0%Oct 19, 2026
CVE-2026-85313: Permissive Cross-domain Policy with Untrusted Domains4.3 MediumN/A0%Oct 19, 2026
2451-2475 of 409855
‹›