The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-63434: Improper Input Validation4.3 MediumN/A0%Nov 3, 2026
CVE-2026-63433: Cross-Site Request Forgery (CSRF)6.8 MediumN/A0%Nov 3, 2026
CVE-2026-63395: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Nov 3, 2026
CVE-2026-54161: Improper Neutralization of Special Elements used in an OS Command8.1 HighN/A1%Nov 3, 2026
CVE-2026-45146: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Nov 3, 2026
CVE-2026-121577: Inefficient Regular Expression ComplexityN/A6.7 Medium0%Nov 3, 2026
CVE-2026-120567: Improper Neutralization of Special Elements in Data Query Logic5.4 Medium2.3 Low0%Nov 3, 2026
CVE-2026-110826: Undefined Security WeaknessN/A6.3 Medium0%Nov 3, 2026
CVE-2026-105822: Server-Side Request Forgery (SSRF)N/A8.3 High0%Nov 3, 2026
CVE-2026-105821: Missing AuthorizationN/A8.3 High0%Nov 3, 2026
CVE-2025-71452: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Nov 3, 2026
CVE-2025-71451: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Nov 3, 2026
CVE-2026-82976: Exposure of Information Through Directory Listing7.1 HighN/A0%Nov 3, 2026
CVE-2026-63417: Insertion of Sensitive Information into Log FileN/A8.2 High0%Nov 3, 2026
CVE-2026-63198: Incorrect Authorization7.3 HighN/A0%Nov 3, 2026
CVE-2026-63197: Improper Neutralization of Input During Web Page Generation7.3 HighN/A0%Nov 3, 2026
CVE-2026-57154: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.1 HighN/A0%Nov 3, 2026
CVE-2026-46487: Missing Authorization7.5 HighN/A0%Nov 3, 2026
CVE-2026-39379: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 3, 2026
CVE-2026-121652: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Nov 3, 2026
CVE-2026-121501: Session Fixation6.3 Medium2.1 Low0%Nov 3, 2026
CVE-2026-121382: Integer Overflow or Wraparound7.5 High7.7 High1%Nov 3, 2026
CVE-2026-120956: Reachable Assertion7.1 High7.1 High0%Nov 3, 2026
CVE-2026-120955: NULL Pointer Dereference7.5 High8.7 High0%Nov 3, 2026
CVE-2026-120954: Integer Overflow or Wraparound3.7 Low6.3 Medium0%Nov 3, 2026
751-775 of 418286
‹›