The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-87008: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A0%Nov 5, 2026
CVE-2026-85076: Incorrect AuthorizationN/A9.0 Critical0%Nov 5, 2026
CVE-2026-81190: External Control of File Name or PathN/A6.9 Medium0%Nov 5, 2026
CVE-2026-77622: Allocation of Resources Without Limits or ThrottlingN/A8.2 High1%Nov 5, 2026
CVE-2026-77463: Use of Less Trusted Source6.5 MediumN/A0%Nov 5, 2026
CVE-2026-69143: Undefined Security WeaknessN/AN/AN/ANov 5, 2026
CVE-2026-62268: Improper Link Resolution Before File AccessN/A5.3 Medium0%Nov 5, 2026
CVE-2026-55458: Inconsistent Interpretation of HTTP RequestsN/A2.9 Low0%Nov 5, 2026
CVE-2026-54442: Server-Side Request Forgery (SSRF)4.8 MediumN/A0%Nov 5, 2026
CVE-2026-49272: oauthlib: OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+8.5 HighN/A0%Nov 5, 2026
CVE-2026-48705: Improper Input Validation9.3 CriticalN/A1%Nov 5, 2026
CVE-2026-46350: Improper Input Validation9.1 CriticalN/A1%Nov 5, 2026
CVE-2026-34157: Permissive Regular ExpressionN/A7.6 High0%Nov 5, 2026
CVE-2026-119434: Improper Handling of Highly Compressed Data (Data Amplification)6.2 Medium6.9 Medium0%Nov 5, 2026
CVE-2026-114604: ardatan graphql-tools: GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemasN/A8.4 High1%Nov 5, 2026
CVE-2026-114134: psf black: Black is the uncompromising Python code formatterN/A8.7 High0%Nov 5, 2026
Red Hat: CVE-2026-112902: Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tagsN/A8.3 High0%Nov 5, 2026
Red Hat: CVE-2026-112899: exploit-intelligence/vulnerability-analysis-rhel9 vulnerabilityN/A6.3 Medium1%Nov 5, 2026
CVE-2026-111771: modelcontextprotocol, @modelcontextprotocol: The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context…6.8 MediumN/A1%Nov 5, 2026
CVE-2026-111753: angular: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and…N/A5.9 Medium1%Nov 5, 2026
CVE-2026-111062: Eugeny russh: russh is a Rust SSH client and server libraryN/A2.3 Low0%Nov 5, 2026
CVE-2026-110802: altair-graphql: Altair is a GraphQL client for all platforms6.1 MediumN/A0%Nov 5, 2026
CVE-2026-77604: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Nov 5, 2026
CVE-2026-76580: Improper Neutralization of Input During Web Page Generation5.4 Medium6.3 Medium0%Nov 5, 2026
CVE-2026-76181: Out-of-bounds Write6.6 Medium5.4 Medium0%Nov 5, 2026
976-1000 of 422263
‹›