The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-28327: Uncontrolled Search Path Element8.2 HighN/A0%Nov 3, 2026
CVE-2026-121631: Authorization Bypass Through User-Controlled Key4.2 Medium2.3 Low0%Nov 3, 2026
CVE-2026-121604: Out-of-bounds Read3.3 Low4.8 Medium0%Nov 3, 2026
CVE-2026-121603: Buffer Copy without Checking Size of Input6.5 Medium8.5 High1%Nov 3, 2026
CVE-2026-121602: Heap-based Buffer Overflow6.5 Medium8.5 High1%Nov 3, 2026
CVE-2026-121588: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121587: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium6.9 Medium0%Nov 3, 2026
CVE-2026-121262: Incorrect Type Conversion or Cast5.3 Medium5.5 Medium0%Nov 3, 2026
CVE-2026-121261: Loop with Unreachable Exit Condition4.3 Medium2.1 Low0%Nov 3, 2026
CVE-2026-121259: Integer Overflow or Wraparound6.5 MediumN/A0%Nov 3, 2026
CVE-2026-120846: Missing Authorization5.3 MediumN/A0%Nov 3, 2026
CVE-2026-120843: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 3, 2026
CVE-2026-119675: Use of Incorrectly-Resolved Name or Reference8.6 High5.2 Medium0%Nov 3, 2026
CVE-2026-119674: Double Decoding of the Same Data3.7 Low2.1 Low0%Nov 3, 2026
CVE-2026-119673: Improper Link Resolution Before File Access2.8 Low1.0 Low0%Nov 3, 2026
CVE-2026-119672: External Control of File Name or Path4.8 Medium5.9 Medium0%Nov 3, 2026
CVE-2026-119521: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 3, 2026
CVE-2026-119509: Missing Authorization5.3 MediumN/A0%Nov 3, 2026
CVE-2026-119495: Missing Authorization5.3 MediumN/A0%Nov 3, 2026
CVE-2026-119487: Missing Authorization5.3 MediumN/A0%Nov 3, 2026
CVE-2026-119485: Missing Authorization5.3 MediumN/A0%Nov 3, 2026
CVE-2026-116859: Missing Authorization5.3 MediumN/A0%Nov 3, 2026
CVE-2026-115716: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Nov 3, 2026
CVE-2026-115715: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Nov 3, 2026
CVE-2026-115714: Improper Certificate Validation7.4 HighN/A0%Nov 3, 2026
826-850 of 418286
‹›