The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-63489: Improper Neutralization of Special Elements in Data Query Logic7.6 HighN/A0%Nov 3, 2026
CVE-2026-63482: Missing Authentication for Critical Function7.5 HighN/A0%Nov 3, 2026
CVE-2026-63478: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Nov 3, 2026
CVE-2026-63476: Uncontrolled Resource Consumption4.3 MediumN/A0%Nov 3, 2026
CVE-2026-63475: Uncontrolled Recursion4.3 MediumN/A0%Nov 3, 2026
CVE-2026-63471: Improper Control of Generation of CodeN/A9.3 Critical0%Nov 3, 2026
CVE-2026-63470: Improper Control of Generation of CodeN/A9.3 Critical0%Nov 3, 2026
CVE-2026-63469: Improper Control of Generation of CodeN/A9.3 Critical0%Nov 3, 2026
CVE-2026-63434: Improper Input Validation4.3 MediumN/A0%Nov 3, 2026
CVE-2026-63433: Cross-Site Request Forgery (CSRF)6.8 MediumN/A0%Nov 3, 2026
CVE-2026-63395: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Nov 3, 2026
CVE-2026-54161: Improper Neutralization of Special Elements used in an OS Command8.1 HighN/A1%Nov 3, 2026
CVE-2026-45146: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Nov 3, 2026
CVE-2026-121577: Inefficient Regular Expression ComplexityN/A6.7 Medium0%Nov 3, 2026
CVE-2026-120567: Improper Neutralization of Special Elements in Data Query Logic5.4 Medium2.3 Low0%Nov 3, 2026
CVE-2026-110826: Undefined Security WeaknessN/A6.3 Medium0%Nov 3, 2026
CVE-2026-105822: Server-Side Request Forgery (SSRF)N/A8.3 High0%Nov 3, 2026
CVE-2026-105821: Missing AuthorizationN/A8.3 High0%Nov 3, 2026
CVE-2025-71452: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Nov 3, 2026
CVE-2025-71451: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Nov 3, 2026
CVE-2026-82976: Exposure of Information Through Directory Listing7.1 HighN/A0%Nov 3, 2026
CVE-2026-63417: Insertion of Sensitive Information into Log FileN/A8.2 High0%Nov 3, 2026
CVE-2026-63198: Incorrect Authorization7.3 HighN/A0%Nov 3, 2026
CVE-2026-63197: Improper Neutralization of Input During Web Page Generation7.3 HighN/A0%Nov 3, 2026
CVE-2026-57154: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.1 HighN/A0%Nov 3, 2026
726-750 of 418286
‹›