The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-109594: Improper Neutralization of Special Elements used in an SQL Command6.8 MediumN/A0%Nov 3, 2026
CVE-2026-109593: Not Failing Securely9.1 CriticalN/A1%Nov 3, 2026
CVE-2026-103916: Improper Link Resolution Before File AccessN/A8.4 High0%Nov 3, 2026
CVE-2026-103077: Missing Authorization4.3 MediumN/A0%Nov 3, 2026
CVE-2026-97350: Improper Neutralization of Argument Delimiters in a CommandN/A6.9 Medium0%Nov 3, 2026
CVE-2026-73328: Unrestricted Upload of File with Dangerous Type7.2 High8.6 High1%Nov 3, 2026
CVE-2026-65168: Heap-based Buffer Overflow7.0 HighN/A0%Nov 3, 2026
CVE-2026-65165: Improper Validation of Array Index5.3 MediumN/A0%Nov 3, 2026
CVE-2026-65140: Incorrect Authorization5.7 MediumN/A0%Nov 3, 2026
CVE-2026-65139: Improper Neutralization of Special Elements used in an SQL Command6.3 MediumN/A0%Nov 3, 2026
CVE-2026-65138: Out-of-bounds Read6.3 MediumN/A0%Nov 3, 2026
CVE-2026-65109: UNIX Symbolic Link (Symlink) Following4.7 MediumN/A0%Nov 3, 2026
CVE-2026-65108: Heap-based Buffer Overflow6.3 MediumN/A0%Nov 3, 2026
CVE-2026-65107: Missing Authorization6.3 MediumN/A0%Nov 3, 2026
CVE-2026-121578: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 3, 2026
CVE-2026-121564: Incomplete Comparison with Missing FactorsN/A1.8 Low0%Nov 3, 2026
CVE-2026-121562: Incorrect Authorization5.3 Medium6.9 Medium0%Nov 3, 2026
CVE-2026-121561: Server-Side Request Forgery (SSRF)7.7 High6.3 Medium0%Nov 3, 2026
CVE-2026-121560: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Nov 3, 2026
CVE-2026-121559: Improper Privilege Management7.2 High8.6 High0%Nov 3, 2026
CVE-2026-121558: Authorization Bypass Through User-Controlled Key4.3 Medium2.3 Low0%Nov 3, 2026
CVE-2026-121557: Missing Authentication for Critical Function5.9 Medium8.2 High0%Nov 3, 2026
CVE-2026-121556: Authorization Bypass Through User-Controlled Key8.3 High8.7 High0%Nov 3, 2026
CVE-2026-121555: Missing Authentication for Critical Function7.5 High8.7 High1%Nov 3, 2026
CVE-2026-121554: Insertion of Sensitive Information Into Sent Data5.9 Medium8.2 High0%Nov 3, 2026
776-800 of 418286
‹›