The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121429: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High1%Nov 3, 2026
CVE-2026-121428: Improper Control of Generation of Code8.8 High8.7 High1%Nov 3, 2026
CVE-2026-121427: External Control of System or Configuration Setting7.5 High8.7 High0%Nov 3, 2026
CVE-2026-121426: Improper Input Validation6.5 Medium8.3 High0%Nov 3, 2026
CVE-2026-121425: Improper Input Validation6.5 Medium8.3 High0%Nov 3, 2026
CVE-2026-121424: Improper Input Validation6.5 Medium8.3 High0%Nov 3, 2026
CVE-2026-121423: Uncontrolled Recursion6.5 Medium7.1 High0%Nov 3, 2026
CVE-2026-121422: Server-Side Request Forgery (SSRF)4.1 Medium5.1 Medium0%Nov 3, 2026
CVE-2026-121421: Server-Side Request Forgery (SSRF)4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121420: Server-Side Request Forgery (SSRF)3.3 Low4.8 Medium0%Nov 3, 2026
CVE-2026-121419: Improper Privilege Management8.1 High8.6 High0%Nov 3, 2026
CVE-2026-121418: Incorrect Authorization4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121417: Use After Free7.8 High8.8 High0%Nov 3, 2026
CVE-2026-121416: Improper Access Control7.1 High7.1 High0%Nov 3, 2026
CVE-2026-121415: Improper Input Validation3.7 Low6.3 Medium0%Nov 3, 2026
CVE-2026-121414: Uncaught Exception5.9 Medium8.2 High0%Nov 3, 2026
CVE-2026-121413: Incorrect Authorization3.1 Low2.3 Low0%Nov 3, 2026
CVE-2026-121412: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Nov 3, 2026
CVE-2026-121411: Improper Input Validation3.1 Low2.3 Low0%Nov 3, 2026
CVE-2026-121410: Divide By Zero4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121409: Reachable Assertion5.9 Medium8.2 High0%Nov 3, 2026
CVE-2026-121408: Concurrent Execution using Shared Resource with Improper Synchronization5.3 Medium6.0 Medium0%Nov 3, 2026
CVE-2026-121407: Improper Input Validation6.5 Medium7.1 High0%Nov 3, 2026
CVE-2026-121406: Reachable Assertion4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121405: Allocation of Resources Without Limits or Throttling4.3 Medium5.3 Medium0%Nov 3, 2026
951-975 of 418286
‹›