The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-97397: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 4, 2026
CVE-2026-121925: Stack-based Buffer Overflow6.6 MediumN/A1%Nov 4, 2026
CVE-2026-114456: Origin Validation Error6.5 MediumN/A0%Nov 4, 2026
CVE-2026-104799: Improper Privilege Management8.8 HighN/A0%Nov 4, 2026
CVE-2026-119468: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 4, 2026
CVE-2026-90634: Out-of-bounds Write7.3 HighN/A0%Nov 4, 2026
CVE-2026-90632: Files or Directories Accessible to External Parties5.5 MediumN/A0%Nov 4, 2026
CVE-2026-90631: Improper Authorization in Handler for Custom URL Scheme3.3 LowN/A0%Nov 4, 2026
CVE-2026-90629: Out-of-bounds Write7.3 HighN/A0%Nov 4, 2026
CVE-2026-90628: Stack-based Buffer Overflow7.3 HighN/A0%Nov 4, 2026
CVE-2026-90627: Files or Directories Accessible to External Parties5.5 MediumN/A0%Nov 4, 2026
CVE-2026-90626: Out-of-bounds Write7.3 HighN/A0%Nov 4, 2026
CVE-2026-90624: Out-of-bounds Write7.3 HighN/A0%Nov 4, 2026
CVE-2026-59268: Out-of-bounds Write7.3 HighN/A0%Nov 4, 2026
CVE-2026-59264: Uncontrolled Search Path Element7.8 HighN/A0%Nov 4, 2026
CVE-2026-59263: Acceptance of Extraneous Untrusted Data With Trusted Data5.5 Medium1.9 Low0%Nov 4, 2026
CVE-2026-108946: Improper Input ValidationN/AN/A0%Nov 4, 2026
CVE-2026-108500: Improper Input ValidationN/AN/A0%Nov 4, 2026
CVE-2026-103582: Memory Allocation with Excessive Size ValueN/AN/A0%Nov 4, 2026
CVE-2026-102704: Protection Mechanism Failure4.4 MediumN/A0%Nov 4, 2026
CVE-2026-102703: Incorrect Type Conversion or Cast4.4 MediumN/A0%Nov 4, 2026
CVE-2026-100302: Allocation of Resources Without Limits or ThrottlingN/A7.1 High1%Nov 4, 2026
CVE-2026-100300: Improper Handling of Exceptional ConditionsN/A8.7 High0%Nov 4, 2026
CVE-2026-100252: Incorrect AuthorizationN/A8.6 High1%Nov 4, 2026
CVE-2026-100235: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A6.0 Medium0%Nov 4, 2026
1001-1025 of 424315
‹›