The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121963: Concurrent Execution using Shared Resource with Improper Synchronization5.9 Medium8.2 High0%Nov 4, 2026
CVE-2026-121962: Out-of-bounds Write8.1 High7.2 High0%Nov 4, 2026
CVE-2026-121961: Concurrent Execution using Shared Resource with Improper Synchronization5.9 Medium8.2 High0%Nov 4, 2026
CVE-2026-121960: Reachable Assertion7.5 High8.7 High0%Nov 4, 2026
CVE-2026-121959: Loop with Unreachable Exit Condition6.5 Medium7.1 High0%Nov 4, 2026
CVE-2026-121958: Heap-based Buffer Overflow7.5 High8.7 High0%Nov 4, 2026
CVE-2026-121957: Concurrent Execution using Shared Resource with Improper Synchronization7.0 High8.7 High0%Nov 4, 2026
CVE-2026-121956: Double Free7.5 High8.7 High0%Nov 4, 2026
CVE-2026-121955: Use After Free6.5 Medium8.7 High0%Nov 4, 2026
CVE-2026-121954: Out-of-bounds Write6.5 Medium7.1 High0%Nov 4, 2026
CVE-2026-121953: Use After Free9.8 Critical9.3 Critical1%Nov 4, 2026
CVE-2026-121952: Out-of-bounds Write9.8 Critical9.3 Critical0%Nov 4, 2026
CVE-2026-121951: Reachable Assertion7.5 High8.7 High0%Nov 4, 2026
CVE-2026-121950: Heap-based Buffer Overflow6.5 Medium7.1 High0%Nov 4, 2026
CVE-2026-119746: Improper Restriction of Excessive Authentication Attempts5.9 Medium8.2 High0%Nov 4, 2026
CVE-2026-109518: UNIX Hard LinkN/A7.7 High1%Nov 4, 2026
CVE-2026-106554: Inefficient Algorithmic ComplexityN/AN/A0%Nov 4, 2026
CVE-2026-66736: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 4, 2026
CVE-2026-39431: Undefined Security WeaknessN/AN/A0%Nov 4, 2026
CVE-2026-39430: Undefined Security WeaknessN/AN/A0%Nov 4, 2026
CVE-2026-122008: Server-Side Request Forgery (SSRF)5.0 Medium5.3 Medium0%Nov 4, 2026
CVE-2026-122007: Authorization Bypass Through User-Controlled Key6.5 Medium7.4 High0%Nov 4, 2026
CVE-2026-121640: Authentication Bypass by Capture-replayN/A9.1 Critical0%Nov 4, 2026
CVE-2026-121639: Unchecked Return ValueN/A9.2 Critical1%Nov 4, 2026
CVE-2026-121638: Improper Certificate ValidationN/A9.1 Critical0%Nov 4, 2026
901-925 of 562086
‹›