The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121545: Insufficient Verification of Data Authenticity6.5 Medium6.9 Medium0%Nov 3, 2026
CVE-2026-121544: Improper Limitation of a Pathname to a Restricted Directory4.9 Medium6.9 Medium1%Nov 3, 2026
CVE-2026-121543: Incorrect Authorization8.8 High8.7 High0%Nov 3, 2026
CVE-2026-121455: Missing Authorization5.4 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121454: Missing Authentication for Critical Function3.7 Low6.3 Medium0%Nov 3, 2026
CVE-2026-121453: Improper Limitation of a Pathname to a Restricted Directory2.7 Low5.1 Medium0%Nov 3, 2026
CVE-2026-121452: Improper Certificate Validation6.5 Medium8.3 High0%Nov 3, 2026
CVE-2026-121451: Cross-Site Request Forgery (CSRF)8.8 High8.7 High0%Nov 3, 2026
CVE-2026-121450: Use of a One-Way Hash with a Predictable Salt7.5 High7.7 High0%Nov 3, 2026
CVE-2026-121260: Improper Control of Generation of Code9.1 Critical8.5 High1%Nov 3, 2026
CVE-2026-120758: NULL Pointer Dereference5.5 Medium5.4 Medium0%Nov 3, 2026
CVE-2026-120757: Out-of-bounds Read7.1 High6.9 Medium0%Nov 3, 2026
CVE-2026-120756: Out-of-bounds Read6.1 Medium1.9 Low0%Nov 3, 2026
CVE-2026-120755: Out-of-bounds Read5.5 Medium4.7 Medium0%Nov 3, 2026
CVE-2026-120754: Use of Uninitialized Resource3.3 Low1.9 Low0%Nov 3, 2026
CVE-2026-119741: Inefficient Algorithmic Complexity7.5 High8.7 High1%Nov 3, 2026
CVE-2026-119215: Authorization Bypass Through User-Controlled KeyN/A7.6 High1%Nov 3, 2026
CVE-2026-118505: Improper Restriction of Excessive Authentication AttemptsN/A6.3 Medium1%Nov 3, 2026
CVE-2026-118487: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Nov 3, 2026
CVE-2026-114582: Server-Side Request Forgery (SSRF)5.3 Medium6.9 Medium0%Nov 3, 2026
CVE-2026-113733: Insufficiently Protected Credentials2.2 Low2.1 Low0%Nov 3, 2026
CVE-2026-113593: Use of Cache Containing Sensitive Information3.1 Low2.3 Low0%Nov 3, 2026
CVE-2026-111362: Server-Side Request Forgery (SSRF)5.3 Medium6.9 Medium1%Nov 3, 2026
CVE-2026-111211: Improper Output Neutralization for Logs5.3 Medium6.9 Medium1%Nov 3, 2026
CVE-2026-108147: Allocation of Resources Without Limits or Throttling5.3 Medium6.9 Medium1%Nov 3, 2026
926-950 of 418286
‹›