The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-113782: Stack-based Buffer Overflow7.1 HighN/A0%Nov 4, 2026
CVE-2026-113780: Out-of-bounds Write9.3 CriticalN/A0%Nov 4, 2026
CVE-2026-107846: Improper Validation of Integrity Check ValueN/A9.3 Critical0%Nov 4, 2026
CVE-2026-102345: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Nov 4, 2026
CVE-2026-57853: Improper Neutralization of Special Elements Used in a Template Engine8.8 High8.7 High1%Nov 4, 2026
CVE-2026-122118: Small Space of Random Values7.4 HighN/A0%Nov 4, 2026
CVE-2026-122116: Incorrect Authorization4.3 MediumN/A0%Nov 4, 2026
CVE-2026-122054: Loop with Unreachable Exit Condition5.9 MediumN/A0%Nov 4, 2026
CVE-2026-121971: Exposure of Sensitive Information to an Unauthorized ActorN/A8.2 High0%Nov 4, 2026
CVE-2026-121927: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Nov 4, 2026
CVE-2026-76506: Improper Limitation of a Pathname to a Restricted Directory7.6 HighN/A1%Nov 4, 2026
CVE-2026-76419: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 4, 2026
CVE-2026-20241: Improper Authorization5.3 MediumN/A0%Nov 4, 2026
CVE-2026-121926: Missing Authentication for Critical Function7.3 High5.5 Medium0%Nov 4, 2026
CVE-2026-119749: Improper Validation of Specified Quantity in Input7.5 High8.7 High0%Nov 4, 2026
CVE-2026-119748: Authorization Bypass Through User-Controlled Key6.5 Medium6.9 Medium0%Nov 4, 2026
CVE-2026-119747: Incorrect Authorization7.1 High7.1 High0%Nov 4, 2026
CVE-2026-92704: Missing Authentication for Critical Function8.3 HighN/A0%Nov 4, 2026
CVE-2026-91168: Authorization Bypass Through User-Controlled Key6.8 MediumN/A0%Nov 4, 2026
CVE-2026-91163: Generation of Error Message Containing Sensitive Information3.7 LowN/A0%Nov 4, 2026
CVE-2026-122032: Improper Neutralization of Special Elements used in an SQL Command6.5 Medium7.1 High0%Nov 4, 2026
CVE-2026-121967: Improper Limitation of a Pathname to a Restricted Directory4.9 Medium2.3 Low0%Nov 4, 2026
CVE-2026-121966: Exposure of Data Element to Wrong Session8.7 High7.0 High0%Nov 4, 2026
CVE-2026-121965: Improperly Controlled Modification of Object Prototype Attributes5.3 Medium6.0 Medium0%Nov 4, 2026
CVE-2026-121964: Heap-based Buffer Overflow7.5 High8.7 High1%Nov 4, 2026
876-900 of 423720
‹›