The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120846: Missing Authorization5.3 MediumN/A0%Nov 3, 2026
CVE-2026-120843: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 3, 2026
CVE-2026-119675: Use of Incorrectly-Resolved Name or Reference8.6 High5.2 Medium0%Nov 3, 2026
CVE-2026-119674: Double Decoding of the Same Data3.7 Low2.1 Low0%Nov 3, 2026
CVE-2026-119673: Improper Link Resolution Before File Access2.8 Low1.0 Low0%Nov 3, 2026
CVE-2026-119672: External Control of File Name or Path4.8 Medium5.9 Medium0%Nov 3, 2026
CVE-2026-119521: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 3, 2026
CVE-2026-119509: Missing Authorization5.3 MediumN/A0%Nov 3, 2026
CVE-2026-119495: Missing Authorization5.3 MediumN/A0%Nov 3, 2026
CVE-2026-119487: Missing Authorization5.3 MediumN/A0%Nov 3, 2026
CVE-2026-119485: Missing Authorization5.3 MediumN/A0%Nov 3, 2026
CVE-2026-116859: Missing Authorization5.3 MediumN/A0%Nov 3, 2026
CVE-2026-116858: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)4.3 MediumN/A0%Nov 3, 2026
CVE-2026-115716: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Nov 3, 2026
CVE-2026-115715: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Nov 3, 2026
CVE-2026-115714: Improper Certificate Validation7.4 HighN/A0%Nov 3, 2026
CVE-2026-115710: Use of Cache Containing Sensitive Information4.2 MediumN/A0%Nov 3, 2026
CVE-2026-115298: Incorrect Authorization4.3 MediumN/A0%Nov 3, 2026
CVE-2026-115297: NULL Pointer Dereference6.5 MediumN/A0%Nov 3, 2026
CVE-2026-115295: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Nov 3, 2026
CVE-2026-115294: Improper Limitation of a Pathname to a Restricted Directory7.3 HighN/A0%Nov 3, 2026
CVE-2026-115293: Insertion of Sensitive Information Into Sent Data6.5 MediumN/A0%Nov 3, 2026
CVE-2026-115292: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Nov 3, 2026
CVE-2026-115290: Uncontrolled Recursion7.5 HighN/A0%Nov 3, 2026
CVE-2026-115289: Use of Multiple Resources with Duplicate Identifier4.3 MediumN/A0%Nov 3, 2026
701-725 of 418286
‹›