The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121951: Reachable Assertion7.5 High8.7 High0%Nov 4, 2026
CVE-2026-121950: Heap-based Buffer Overflow6.5 Medium7.1 High0%Nov 4, 2026
CVE-2026-119746: Improper Restriction of Excessive Authentication Attempts5.9 Medium8.2 High0%Nov 4, 2026
CVE-2026-109518: UNIX Hard LinkN/A7.7 High1%Nov 4, 2026
CVE-2026-106554: Inefficient Algorithmic ComplexityN/AN/A0%Nov 4, 2026
CVE-2026-66736: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 4, 2026
CVE-2026-39431: Undefined Security WeaknessN/AN/A0%Nov 4, 2026
CVE-2026-39430: Undefined Security WeaknessN/AN/A0%Nov 4, 2026
CVE-2026-122008: Server-Side Request Forgery (SSRF)5.0 Medium5.3 Medium0%Nov 4, 2026
CVE-2026-122007: Authorization Bypass Through User-Controlled Key6.5 Medium7.4 High0%Nov 4, 2026
CVE-2026-121640: Authentication Bypass by Capture-replayN/A9.1 Critical0%Nov 4, 2026
CVE-2026-121639: Unchecked Return ValueN/A9.2 Critical1%Nov 4, 2026
CVE-2026-121638: Improper Certificate ValidationN/A9.1 Critical0%Nov 4, 2026
CVE-2026-121637: Insufficient Verification of Data AuthenticityN/A8.9 High0%Nov 4, 2026
CVE-2026-121632: Improper Neutralization of Input During Web Page GenerationN/AN/A0%Nov 4, 2026
CVE-2026-121009: Improper Neutralization of Special Elements used in an SQL CommandN/AN/A0%Nov 4, 2026
CVE-2026-121008: Improper Neutralization of Input During Web Page GenerationN/AN/A0%Nov 4, 2026
CVE-2026-121007: Improper Neutralization of Special Elements used in an SQL CommandN/AN/A0%Nov 4, 2026
CVE-2026-120421: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 4, 2026
CVE-2026-119776: Missing Critical Step in AuthenticationN/A6.1 Medium0%Nov 4, 2026
CVE-2026-114627: Improper Neutralization of Input During Web Page GenerationN/AN/A0%Nov 4, 2026
CVE-2026-100408: Out-of-bounds Write4.4 MediumN/A0%Nov 4, 2026
CVE-2026-100407: Out-of-bounds Write4.4 MediumN/A0%Nov 4, 2026
CVE-2026-121993: Missing Authorization4.3 Medium5.3 Medium0%Nov 4, 2026
CVE-2026-119745: Missing Authorization4.3 Medium5.3 Medium0%Nov 4, 2026
951-975 of 570399
‹›