The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120733: Cleartext Storage of Sensitive InformationN/AN/A0%Nov 3, 2026
CVE-2026-120716: Insertion of Sensitive Information Into Sent DataN/AN/A0%Nov 3, 2026
CVE-2026-120715: Server-Side Request Forgery (SSRF)N/AN/A0%Nov 3, 2026
CVE-2026-119636: Missing Release of Resource after Effective LifetimeN/AN/A0%Nov 3, 2026
CVE-2026-115878: Improper Control of Generation of Code7.8 HighN/A1%Nov 3, 2026
CVE-2026-115779: Improper Neutralization of Special Elements in Output Used by a Downstream ComponentN/A6.3 Medium1%Nov 3, 2026
CVE-2026-115732: Incorrect AuthorizationN/A9.0 Critical1%Nov 3, 2026
CVE-2026-115731: Deserialization of Untrusted DataN/A9.4 Critical0%Nov 3, 2026
CVE-2026-111754: URL Redirection to Untrusted SiteN/A5.1 Medium1%Nov 3, 2026
CVE-2026-111752: Uncontrolled Resource ConsumptionN/A8.2 High1%Nov 3, 2026
CVE-2026-111751: angular: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and…N/A8.2 High1%Nov 3, 2026
CVE-2026-121621: Red Hat Red Hat OpenShift GitOps: A command injection vulnerability was found in Argo CD Image Updater, where a proxy URL configured on an SSH Git…8.8 HighN/A2%Nov 3, 2026
CVE-2026-121073: Use After FreeN/AN/A0%Nov 3, 2026
CVE-2026-121049: Out-of-bounds ReadN/AN/A0%Nov 3, 2026
CVE-2026-121176: Use of Uninitialized ResourceN/AN/A0%Nov 3, 2026
CVE-2026-121257: Use After FreeN/AN/A0%Nov 3, 2026
CVE-2026-121132: Exposure of Sensitive Information to an Unauthorized ActorN/AN/A0%Nov 3, 2026
CVE-2026-121239: Exposure of Sensitive Information to an Unauthorized ActorN/AN/A0%Nov 3, 2026
CVE-2026-121163: Improper Input ValidationN/AN/A0%Nov 3, 2026
CVE-2026-121059: Exposure of Sensitive Information to an Unauthorized ActorN/AN/A0%Nov 3, 2026
CVE-2026-121161: Exposure of Sensitive Information to an Unauthorized ActorN/AN/A0%Nov 3, 2026
CVE-2026-121105: Exposure of Sensitive Information to an Unauthorized ActorN/AN/A0%Nov 3, 2026
CVE-2026-121211: Use After FreeN/AN/A0%Nov 3, 2026
CVE-2026-121224: Improper Link Resolution Before File AccessN/AN/A0%Nov 3, 2026
CVE-2026-121133: Use of Incorrectly-Resolved Name or ReferenceN/AN/A0%Nov 3, 2026
576-600 of 418286
‹›