The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-63502: yeti-platform yeti: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline8.3 HighN/AN/ANov 3, 2026
CVE-2026-63501: Agamnentzar ag-psd: ag-psd is a JavaScript library for reading and writing Photoshop Document files7.5 HighN/AN/ANov 3, 2026
CVE-2026-63500: yeti-platform yeti: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline7.1 HighN/AN/ANov 3, 2026
CVE-2026-63489: yeti-platform yeti: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline7.6 HighN/AN/ANov 3, 2026
CVE-2026-63482: yeti-platform yeti: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline7.5 HighN/AN/ANov 3, 2026
CVE-2026-63478: isomorphic-git: isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers5.3 MediumN/AN/ANov 3, 2026
CVE-2026-63476: isomorphic-git: isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers4.3 MediumN/AN/ANov 3, 2026
CVE-2026-63475: isomorphic-git: isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers4.3 MediumN/AN/ANov 3, 2026
CVE-2026-63471: koxudaxi fastapi-code-generator: fastapi-code-generator creates FastAPI applications from OpenAPI filesN/A9.3 CriticalN/ANov 3, 2026
CVE-2026-63470: koxudaxi fastapi-code-generator: fastapi-code-generator creates FastAPI applications from OpenAPI filesN/A9.3 CriticalN/ANov 3, 2026
CVE-2026-63469: koxudaxi fastapi-code-generator: fastapi-code-generator creates FastAPI applications from OpenAPI filesN/A9.3 CriticalN/ANov 3, 2026
CVE-2026-63434: Improper Input Validation4.3 MediumN/AN/ANov 3, 2026
CVE-2026-63433: Cross-Site Request Forgery (CSRF)6.8 MediumN/AN/ANov 3, 2026
CVE-2026-63395: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/AN/ANov 3, 2026
CVE-2026-54161: Improper Neutralization of Special Elements used in an OS Command8.1 HighN/AN/ANov 3, 2026
CVE-2026-45146: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/AN/ANov 3, 2026
CVE-2026-121577: Inefficient Regular Expression ComplexityN/A6.7 MediumN/ANov 3, 2026
CVE-2026-120567: Improper Neutralization of Special Elements in Data Query Logic5.4 Medium2.3 LowN/ANov 3, 2026
CVE-2026-110826: Undefined Security WeaknessN/A6.3 MediumN/ANov 3, 2026
CVE-2026-105822: Server-Side Request Forgery (SSRF)N/A8.3 HighN/ANov 3, 2026
CVE-2026-105821: Missing AuthorizationN/A8.3 HighN/ANov 3, 2026
CVE-2025-71452: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 MediumN/ANov 3, 2026
CVE-2025-71451: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 MediumN/ANov 3, 2026
CVE-2026-82976: Red Hat: A flaw was found in the image-customization-controller used in OpenShift's bare metal provisioning stack7.1 HighN/AN/ANov 3, 2026
CVE-2026-63417: Insertion of Sensitive Information into Log FileN/A8.2 HighN/ANov 3, 2026
626-650 of 420775
‹›