The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-71169: Incorrect Permission Assignment for Critical Resource7.0 HighN/A0%Oct 19, 2026
CVE-2026-112782: Uncontrolled Resource Consumption7.5 High8.7 High0%Oct 19, 2026
CVE-2026-112781: Exposure of Sensitive Information to an Unauthorized Actor6.5 Medium8.7 High0%Oct 19, 2026
CVE-2026-112780: Exposed Dangerous Method or Function8.8 High9.3 Critical0%Oct 19, 2026
CVE-2026-112779: Allocation of Resources Without Limits or Throttling9.8 Critical9.3 Critical0%Oct 19, 2026
CVE-2026-112778: Missing AuthorizationN/A6.4 Medium0%Oct 19, 2026
CVE-2026-112777: Incomplete List of Disallowed Inputs7.2 High8.7 High0%Oct 19, 2026
CVE-2026-112776: Incorrect Authorization9.8 Critical9.3 Critical0%Oct 19, 2026
CVE-2026-112775: Improper Authentication7.5 High8.7 High0%Oct 19, 2026
CVE-2026-112774: Improper Control of Generation of Code7.2 High8.7 High1%Oct 19, 2026
CVE-2026-112773: Improper Control of Generation of Code8.8 High8.7 High1%Oct 19, 2026
CVE-2026-112772: Improper Control of Generation of Code8.8 High8.7 High1%Oct 19, 2026
CVE-2026-112771: Exposure of Sensitive Information to an Unauthorized Actor6.5 Medium7.1 High0%Oct 19, 2026
CVE-2026-112770: Improper Control of Generation of Code8.8 High8.7 High1%Oct 19, 2026
CVE-2026-112769: Incorrect AuthorizationN/A2.3 Low0%Oct 19, 2026
CVE-2026-112768: Incorrect AuthorizationN/A6.9 Medium0%Oct 19, 2026
CVE-2026-112297: Server-Side Request Forgery (SSRF)4.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-112254: Server-Side Request Forgery (SSRF)4.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-111766: Uncontrolled Resource Consumption3.7 LowN/A0%Oct 19, 2026
CVE-2024-54581: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2026-112260: Out-of-bounds Read7.1 HighN/A0%Oct 19, 2026
CVE-2026-112259: NULL Pointer Dereference5.5 MediumN/A0%Oct 19, 2026
CVE-2026-112252: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 19, 2026
CVE-2026-112251: URL Redirection to Untrusted Site4.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-110688: Inefficient Algorithmic ComplexityN/AN/A0%Oct 19, 2026
2626-2650 of 417319
‹›