The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120646: Access of Resource Using Incompatible Type ('Type Confusion')N/AN/A0%Nov 4, 2026
CVE-2026-120645: Inefficient Regular Expression Complexity (ReDoS)N/AN/A0%Nov 4, 2026
CVE-2026-120644: Improper Encoding or Escaping of OutputN/AN/A0%Nov 4, 2026
CVE-2026-120643: Cross-site Scripting (XSS)N/AN/A0%Nov 4, 2026
CVE-2026-120642: Improper Use of Validation FrameworkN/AN/A0%Nov 4, 2026
CVE-2026-120641: Path TraversalN/AN/A0%Nov 4, 2026
CVE-2026-120640: Cross-Site Request Forgery (CSRF)N/AN/A0%Nov 4, 2026
CVE-2026-120639: HTTP Response SplittingN/AN/A0%Nov 4, 2026
CVE-2026-120638: URL Redirection to Untrusted Site ('Open Redirect')N/AN/A0%Nov 4, 2026
CVE-2026-120637: Active Debug CodeN/AN/A0%Nov 4, 2026
CVE-2026-120636: URL Redirection to Untrusted Site ('Open Redirect')N/AN/A0%Nov 4, 2026
CVE-2026-120635: Interpretation ConflictN/AN/A0%Nov 4, 2026
CVE-2026-120634: Exposure of Data Element to Wrong SessionN/AN/A0%Nov 4, 2026
CVE-2026-120633: URL Redirection to Untrusted Site ('Open Redirect')N/AN/A0%Nov 4, 2026
CVE-2026-120632: Inefficient Regular Expression Complexity (ReDoS)N/AN/A0%Nov 4, 2026
CVE-2026-120631: Inefficient Regular Expression Complexity (ReDoS)N/AN/A0%Nov 4, 2026
CVE-2026-118628: MLflow: MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability8.2 HighN/A0%Nov 4, 2026
CVE-2026-118627: MLflow: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability7.8 HighN/A0%Nov 4, 2026
CVE-2026-118626: MLflow: MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability5.4 MediumN/A0%Nov 4, 2026
CVE-2026-118625: MLflow: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability6.3 MediumN/A0%Nov 4, 2026
CVE-2026-118624: MLflow: MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability5.4 MediumN/A0%Nov 4, 2026
CVE-2026-118623: MLflow: MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability7.8 HighN/A0%Nov 4, 2026
CVE-2026-114552: MailEnable: MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability6.5 MediumN/A0%Nov 4, 2026
CVE-2026-114551: MailEnable: MailEnable Auth Cleartext Storage Information Disclosure Vulnerability5.9 MediumN/A0%Nov 4, 2026
CVE-2026-114550: libwebsockets: libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability8.1 HighN/A1%Nov 4, 2026
351-375 of 418286
‹›