The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-97701: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Nov 4, 2026
CVE-2026-82033: Missing Authentication for Critical Function8.4 High8.6 High0%Nov 4, 2026
CVE-2026-82029: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Nov 4, 2026
CVE-2026-63183: Origin Validation ErrorN/A6.9 Medium0%Nov 4, 2026
CVE-2026-122148: Client-Side Enforcement of Server-Side SecurityN/A8.2 High0%Nov 4, 2026
CVE-2026-122124: Incorrect Resource Transfer Between Spheres6.1 MediumN/A0%Nov 4, 2026
CVE-2026-122120: Unrestricted Upload of File with Dangerous Type9.0 CriticalN/A1%Nov 4, 2026
CVE-2026-121932: Improper Neutralization of Special Elements used in an OS Command10.0 Critical9.3 Critical2%Nov 4, 2026
CVE-2026-121931: Improper Neutralization of Special Elements used in an OS Command9.1 Critical8.5 High3%Nov 4, 2026
CVE-2026-121930: Improper Neutralization of Special Elements used in an OS Command9.1 Critical8.5 High3%Nov 4, 2026
CVE-2026-121929: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Nov 4, 2026
CVE-2026-121928: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Nov 4, 2026
CVE-2026-113783: Stack-based Buffer Overflow7.4 HighN/A0%Nov 4, 2026
CVE-2026-113782: Stack-based Buffer Overflow7.1 HighN/A0%Nov 4, 2026
CVE-2026-113780: Out-of-bounds Write9.3 CriticalN/A0%Nov 4, 2026
CVE-2026-107846: Improper Validation of Integrity Check ValueN/A9.3 Critical0%Nov 4, 2026
CVE-2026-102345: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Nov 4, 2026
CVE-2026-57853: Improper Neutralization of Special Elements Used in a Template Engine8.8 High8.7 High1%Nov 4, 2026
CVE-2026-122118: Small Space of Random Values7.4 HighN/A0%Nov 4, 2026
CVE-2026-122116: Incorrect Authorization4.3 MediumN/A0%Nov 4, 2026
CVE-2026-122054: Loop with Unreachable Exit Condition5.9 MediumN/A0%Nov 4, 2026
CVE-2026-121971: Exposure of Sensitive Information to an Unauthorized ActorN/A8.2 High0%Nov 4, 2026
CVE-2026-121927: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Nov 4, 2026
CVE-2026-76506: Improper Limitation of a Pathname to a Restricted Directory7.6 HighN/A1%Nov 4, 2026
CVE-2026-76419: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 4, 2026
901-925 of 570399
‹›