The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-105991: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security…3.5 LowN/A0%Nov 4, 2026
CVE-2026-105702: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive…4.3 MediumN/A0%Nov 4, 2026
CVE-2026-104203: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Nov 4, 2026
CVE-2026-102664: Use of Uninitialized Resource7.1 HighN/A0%Nov 4, 2026
CVE-2026-102340: Missing Authentication for Critical Function8.5 HighN/A0%Nov 4, 2026
CVE-2026-102339: Authorization Bypass Through User-Controlled Key8.2 HighN/A0%Nov 4, 2026
CVE-2025-71457: Unverified Password Change9.8 Critical9.3 Critical0%Nov 4, 2026
CVE-2025-71456: Improper Neutralization of Special Elements used in an SQL Command8.1 High8.6 High0%Nov 4, 2026
CVE-2025-71455: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium5.9 Medium0%Nov 4, 2026
CVE-2025-71454: Cross-Site Request Forgery (CSRF)6.5 Medium6.9 Medium0%Nov 4, 2026
CVE-2025-71453: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Nov 4, 2026
CVE-2026-97705: Loop with Unreachable Exit Condition7.5 HighN/A0%Nov 4, 2026
CVE-2026-76806: Improper Limitation of a Pathname to a Restricted Directory6.3 MediumN/A0%Nov 4, 2026
CVE-2026-122220: Authentication Bypass by Capture-replay7.4 High9.1 Critical0%Nov 4, 2026
CVE-2026-122192: Detection of Error Condition Without Action7.5 High7.1 High0%Nov 4, 2026
CVE-2026-121933: Missing Authentication for Critical Function10.0 Critical9.3 Critical1%Nov 4, 2026
CVE-2026-115574: Missing Authorization5.3 MediumN/A0%Nov 4, 2026
CVE-2026-115474: Missing Authorization6.5 MediumN/A0%Nov 4, 2026
CVE-2026-113374: Missing AuthorizationN/A8.6 High0%Nov 4, 2026
CVE-2026-113373: Weak AuthenticationN/A9.1 Critical0%Nov 4, 2026
CVE-2026-113372: Insufficiently Protected CredentialsN/A7.1 High0%Nov 4, 2026
CVE-2026-113371: Insufficiently Protected CredentialsN/A7.1 High0%Nov 4, 2026
CVE-2026-113370: Improper Neutralization of Special Elements used in an SQL CommandN/A7.7 High0%Nov 4, 2026
CVE-2026-113369: Improper Neutralization of Input During Web Page GenerationN/A6.3 Medium0%Nov 4, 2026
CVE-2026-113368: Missing AuthorizationN/A5.3 Medium0%Nov 4, 2026
876-900 of 418372
‹›