The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-55458: Inconsistent Interpretation of HTTP RequestsN/A2.9 Low0%Nov 5, 2026
CVE-2026-54442: Server-Side Request Forgery (SSRF)4.8 MediumN/A0%Nov 5, 2026
CVE-2026-49272: oauthlib: OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+8.5 HighN/A0%Nov 5, 2026
CVE-2026-48705: Improper Input Validation9.3 CriticalN/A1%Nov 5, 2026
CVE-2026-46350: Improper Input Validation9.1 CriticalN/A1%Nov 5, 2026
CVE-2026-34157: Permissive Regular ExpressionN/A7.6 High0%Nov 5, 2026
CVE-2026-119434: Improper Handling of Highly Compressed Data (Data Amplification)6.2 Medium6.9 Medium0%Nov 5, 2026
CVE-2026-114604: ardatan graphql-tools: GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemasN/A8.4 High1%Nov 5, 2026
CVE-2026-114134: psf black: Black is the uncompromising Python code formatterN/A8.7 High0%Nov 5, 2026
Red Hat: CVE-2026-112902: Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tagsN/A8.3 High0%Nov 5, 2026
Red Hat: CVE-2026-112899: exploit-intelligence/vulnerability-analysis-rhel9 vulnerabilityN/A6.3 Medium1%Nov 5, 2026
CVE-2026-111771: modelcontextprotocol, @modelcontextprotocol: The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context…6.8 MediumN/A1%Nov 5, 2026
CVE-2026-111753: angular: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and…N/A5.9 Medium1%Nov 5, 2026
CVE-2026-111062: Eugeny russh: russh is a Rust SSH client and server libraryN/A2.3 Low0%Nov 5, 2026
CVE-2026-110802: altair-graphql: Altair is a GraphQL client for all platforms6.1 MediumN/A0%Nov 5, 2026
CVE-2026-77604: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Nov 5, 2026
CVE-2026-76580: Improper Neutralization of Input During Web Page Generation5.4 Medium6.3 Medium0%Nov 5, 2026
CVE-2026-76181: Out-of-bounds Write6.6 Medium5.4 Medium0%Nov 5, 2026
CVE-2026-65983: Files or Directories Accessible to External Parties7.5 HighN/A0%Nov 5, 2026
CVE-2026-44875: Incorrect Default Permissions7.8 HighN/A0%Nov 5, 2026
CVE-2026-1339: URL Redirection to Untrusted Site5.4 Medium5.1 Medium0%Nov 5, 2026
CVE-2026-19134: Observable Discrepancy6.5 Medium7.1 High0%Nov 5, 2026
CVE-2026-18159: Improper Restriction of Rendered UI Layers or Frames4.3 Medium5.3 Medium0%Nov 5, 2026
CVE-2026-116790: signalwire freeswitch: FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to…9.1 CriticalN/A0%Nov 5, 2026
CVE-2026-116789: signalwire freeswitch: FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to…7.4 HighN/A0%Nov 5, 2026
976-1000 of 420487
‹›