The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-118391: Allocation of Resources Without Limits or ThrottlingN/A8.9 High0%Nov 4, 2026
CVE-2026-122006: Initialization of a Resource with an Insecure Default9.8 CriticalN/A1%Nov 4, 2026
CVE-2026-65555: Incorrect Privilege Assignment9.8 CriticalN/A0%Nov 4, 2026
CVE-2026-121970: Improper Verification of Cryptographic Signature3.7 Low6.3 Medium0%Nov 4, 2026
CVE-2026-121946: Improper Neutralization of CRLF Sequences7.2 High6.9 Medium0%Nov 4, 2026
CVE-2026-121945: Authorization Bypass Through User-Controlled Key7.6 High7.2 High0%Nov 4, 2026
CVE-2026-121944: Loop with Unreachable Exit Condition5.5 Medium6.8 Medium0%Nov 4, 2026
CVE-2026-121943: Improper Null Termination4.8 Medium6.3 Medium6%Nov 4, 2026
CVE-2026-121942: Out-of-bounds Read6.1 Medium6.9 Medium0%Nov 4, 2026
CVE-2026-121941: Heap-based Buffer Overflow7.8 High8.5 High0%Nov 4, 2026
CVE-2026-121940: Authorization Bypass Through User-Controlled Key8.8 High8.7 High0%Nov 4, 2026
CVE-2026-121939: Authentication Bypass by Spoofing8.1 High9.2 Critical1%Nov 4, 2026
CVE-2026-121938: Authorization Bypass Through User-Controlled Key5.3 Medium6.0 Medium0%Nov 4, 2026
CVE-2026-121937: Authorization Bypass Through User-Controlled Key3.1 Low2.3 Low0%Nov 4, 2026
CVE-2026-121936: Server-Side Request Forgery (SSRF)6.5 Medium6.9 Medium0%Nov 4, 2026
CVE-2026-121620: Insufficient Verification of Data Authenticity6.5 Medium8.3 High0%Nov 4, 2026
CVE-2026-121373: Overly Restrictive Regular ExpressionN/A5.3 Medium0%Nov 4, 2026
CVE-2026-121147: Improper Certificate ValidationN/A8.5 High0%Nov 4, 2026
CVE-2026-121146: Insertion of Sensitive Information into Log FileN/A6.8 Medium0%Nov 4, 2026
CVE-2026-121145: Origin Validation ErrorN/A7.1 High0%Nov 4, 2026
CVE-2026-121144: Use of Hard-coded CredentialsN/A8.8 High0%Nov 4, 2026
CVE-2026-119481: Incorrect Privilege Assignment9.8 CriticalN/A0%Nov 4, 2026
CVE-2026-118516: Interpretation ConflictN/A6.3 Medium0%Nov 4, 2026
CVE-2026-118513: Authentication Bypass by SpoofingN/A7.7 High0%Nov 4, 2026
CVE-2026-107479: Numeric Truncation ErrorN/A1.7 Low0%Nov 4, 2026
976-1000 of 420275
‹›