The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121561: Server-Side Request Forgery (SSRF)7.7 High6.3 Medium0%Nov 3, 2026
CVE-2026-121560: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Nov 3, 2026
CVE-2026-121559: Improper Privilege Management7.2 High8.6 High0%Nov 3, 2026
CVE-2026-121558: Authorization Bypass Through User-Controlled Key4.3 Medium2.3 Low0%Nov 3, 2026
CVE-2026-121557: Missing Authentication for Critical Function5.9 Medium8.2 High0%Nov 3, 2026
CVE-2026-121556: Authorization Bypass Through User-Controlled Key8.3 High8.7 High0%Nov 3, 2026
CVE-2026-121555: Missing Authentication for Critical Function7.5 High8.7 High1%Nov 3, 2026
CVE-2026-121554: Insertion of Sensitive Information Into Sent Data5.9 Medium8.2 High0%Nov 3, 2026
CVE-2026-121553: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)4.8 Medium6.3 Medium0%Nov 3, 2026
CVE-2026-121552: Missing Authorization4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121551: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Nov 3, 2026
CVE-2026-121550: Improper Link Resolution Before File Access3.3 Low1.0 Low0%Nov 3, 2026
CVE-2026-121549: Insecure Temporary File4.4 Medium4.1 Medium0%Nov 3, 2026
CVE-2026-121548: Improper Neutralization of Special Elements used in an OS Command7.8 High8.4 High1%Nov 3, 2026
CVE-2026-121547: Improper Neutralization of Escape, Meta, or Control Sequences2.2 Low1.0 Low0%Nov 3, 2026
CVE-2026-121546: Improper Link Resolution Before File Access5.9 Medium6.0 Medium0%Nov 3, 2026
CVE-2026-121545: Insufficient Verification of Data Authenticity6.5 Medium6.9 Medium0%Nov 3, 2026
CVE-2026-121544: Improper Limitation of a Pathname to a Restricted Directory4.9 Medium6.9 Medium1%Nov 3, 2026
CVE-2026-121543: Incorrect Authorization8.8 High8.7 High0%Nov 3, 2026
CVE-2026-121455: Missing Authorization5.4 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121454: Missing Authentication for Critical Function3.7 Low6.3 Medium0%Nov 3, 2026
CVE-2026-121453: Improper Limitation of a Pathname to a Restricted Directory2.7 Low5.1 Medium0%Nov 3, 2026
CVE-2026-121452: Improper Certificate Validation6.5 Medium8.3 High0%Nov 3, 2026
CVE-2026-121451: Cross-Site Request Forgery (CSRF)8.8 High8.7 High0%Nov 3, 2026
CVE-2026-121450: Use of a One-Way Hash with a Predictable Salt7.5 High7.7 High0%Nov 3, 2026
901-925 of 418286
‹›