The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121448: Improper Limitation of a Pathname to a Restricted Directory8.3 High8.7 High0%Nov 3, 2026
CVE-2026-121447: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121446: Incomplete Filtering of Special Elements4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121445: Improper Check for Unusual or Exceptional Conditions5.9 Medium8.2 High0%Nov 3, 2026
CVE-2026-121444: Uncontrolled Resource Consumption7.5 High8.7 High0%Nov 3, 2026
CVE-2026-121443: Uncaught Exception5.3 Medium6.9 Medium0%Nov 3, 2026
CVE-2026-121442: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121441: Inconsistent Interpretation of HTTP Requests3.7 Low6.3 Medium0%Nov 3, 2026
CVE-2026-121440: Improper Protection of Alternate Path3.7 Low6.3 Medium0%Nov 3, 2026
CVE-2026-121439: Inconsistent Interpretation of HTTP Requests5.3 Medium6.9 Medium0%Nov 3, 2026
CVE-2026-121438: Uncontrolled Resource Consumption5.3 Medium6.9 Medium0%Nov 3, 2026
CVE-2026-121437: Inefficient Algorithmic Complexity7.5 High8.7 High1%Nov 3, 2026
CVE-2026-121436: Exposure of Sensitive Information to an Unauthorized Actor7.2 High8.6 High0%Nov 3, 2026
CVE-2026-121435: Missing Authorization4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121434: Missing Authorization5.4 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121433: Improper Neutralization of Formula Elements in a CSV File5.4 Medium5.1 Medium0%Nov 3, 2026
CVE-2026-121432: Improper Neutralization of CRLF Sequences3.5 Low5.1 Medium0%Nov 3, 2026
CVE-2026-121431: Server-Side Request Forgery (SSRF)5.3 Medium6.9 Medium0%Nov 3, 2026
CVE-2026-121430: Missing Authorization5.4 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121429: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High1%Nov 3, 2026
CVE-2026-121428: Improper Control of Generation of Code8.8 High8.7 High1%Nov 3, 2026
CVE-2026-121427: External Control of System or Configuration Setting7.5 High8.7 High0%Nov 3, 2026
CVE-2026-121426: Improper Input Validation6.5 Medium8.3 High0%Nov 3, 2026
CVE-2026-121425: Improper Input Validation6.5 Medium8.3 High0%Nov 3, 2026
CVE-2026-121424: Improper Input Validation6.5 Medium8.3 High0%Nov 3, 2026
801-825 of 418286
‹›