The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-115294: Improper Limitation of a Pathname to a Restricted Directory7.3 HighN/A0%Nov 3, 2026
CVE-2026-115293: Insertion of Sensitive Information Into Sent Data6.5 MediumN/A0%Nov 3, 2026
CVE-2026-115292: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Nov 3, 2026
CVE-2026-115290: Uncontrolled Recursion7.5 HighN/A0%Nov 3, 2026
CVE-2026-115289: Use of Multiple Resources with Duplicate Identifier4.3 MediumN/A0%Nov 3, 2026
CVE-2026-114187: Missing Authorization5.3 MediumN/A0%Nov 3, 2026
CVE-2026-114185: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 3, 2026
CVE-2026-114183: Insertion of Sensitive Information Into Sent Data6.5 MediumN/A0%Nov 3, 2026
CVE-2026-109594: Improper Neutralization of Special Elements used in an SQL Command6.8 MediumN/A0%Nov 3, 2026
CVE-2026-109593: Not Failing Securely9.1 CriticalN/A1%Nov 3, 2026
CVE-2026-103916: Improper Link Resolution Before File AccessN/A8.4 High0%Nov 3, 2026
CVE-2026-103077: Missing Authorization4.3 MediumN/A0%Nov 3, 2026
CVE-2026-97350: Improper Neutralization of Argument Delimiters in a CommandN/A6.9 Medium0%Nov 3, 2026
CVE-2026-73328: Unrestricted Upload of File with Dangerous Type7.2 High8.6 High1%Nov 3, 2026
CVE-2026-65168: Heap-based Buffer Overflow7.0 HighN/A0%Nov 3, 2026
CVE-2026-65165: Improper Validation of Array Index5.3 MediumN/A0%Nov 3, 2026
CVE-2026-65140: Incorrect Authorization5.7 MediumN/A0%Nov 3, 2026
CVE-2026-65139: Improper Neutralization of Special Elements used in an SQL Command6.3 MediumN/A0%Nov 3, 2026
CVE-2026-65138: Out-of-bounds Read6.3 MediumN/A0%Nov 3, 2026
CVE-2026-65109: UNIX Symbolic Link (Symlink) Following4.7 MediumN/A0%Nov 3, 2026
CVE-2026-65108: Heap-based Buffer Overflow6.3 MediumN/A0%Nov 3, 2026
CVE-2026-65107: Missing Authorization6.3 MediumN/A0%Nov 3, 2026
CVE-2026-121578: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 3, 2026
CVE-2026-121564: Incomplete Comparison with Missing FactorsN/A1.8 Low0%Nov 3, 2026
CVE-2026-121562: Incorrect Authorization5.3 Medium6.9 Medium0%Nov 3, 2026
876-900 of 418286
‹›