Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2024-21954: Improper Check for Unusual or Exceptional ConditionsN/A7.0 High0%Nov 12, 2026
CVE-2026-81843: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Nov 12, 2026
CVE-2026-71363: Missing Authentication for Critical Function5.3 MediumN/A0%Nov 12, 2026
CVE-2026-127204: Insufficient Verification of Data Authenticity7.5 High8.7 High0%Nov 12, 2026
CVE-2026-127101: NULL Pointer Dereference5.5 MediumN/A0%Nov 12, 2026
CVE-2026-127100: NULL Pointer Dereference5.5 MediumN/A0%Nov 12, 2026
CVE-2026-127099: Stack-based Buffer Overflow5.9 MediumN/A0%Nov 12, 2026
CVE-2026-127063: Use of Default CredentialsN/A9.3 Critical0%Nov 12, 2026
CVE-2026-126831: Stack-based Buffer Overflow5.5 MediumN/A0%Nov 12, 2026
CVE-2026-126199: Insufficient UI Warning of Dangerous Operations6.8 MediumN/A0%Nov 12, 2026
CVE-2026-126198: Insufficient UI Warning of Dangerous Operations3.1 LowN/A0%Nov 12, 2026
CVE-2026-126197: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Nov 12, 2026
CVE-2026-126196: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/A0%Nov 12, 2026
CVE-2026-125324: Undefined Security WeaknessN/AN/AN/ANov 12, 2026
CVE-2026-124702: URL Redirection to Untrusted Site7.8 HighN/A0%Nov 12, 2026
CVE-2026-124700: URL Redirection to Untrusted Site7.8 HighN/A0%Nov 12, 2026
CVE-2026-120471: Missing AuthorizationN/A6.9 Medium0%Nov 12, 2026
CVE-2026-120470: Missing AuthorizationN/A6.9 Medium0%Nov 12, 2026
CVE-2026-120469: URL Redirection to Untrusted SiteN/A5.1 Medium0%Nov 12, 2026
CVE-2026-120468: Exposure of Sensitive Information to an Unauthorized ActorN/A6.9 Medium0%Nov 12, 2026
CVE-2026-120466: Missing AuthorizationN/A8.8 High0%Nov 12, 2026
CVE-2026-119275: Improper Neutralization of Input During Web Page GenerationN/A7.0 High0%Nov 12, 2026
CVE-2026-118495: Exposure of Sensitive Information to an Unauthorized ActorN/A8.8 High0%Nov 12, 2026
CVE-2026-117551: Unrestricted Upload of File with Dangerous TypeN/A10.0 Critical0%Nov 12, 2026
CVE-2026-117550: Improper Access ControlN/A7.1 High0%Nov 12, 2026
926-950 of 427292