The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-59267: Heap-based Buffer OverflowN/A5.8 Medium0%Nov 4, 2026
CVE-2026-115448: Allocation of Resources Without Limits or ThrottlingN/A8.7 High1%Nov 4, 2026
CVE-2026-95649: Inclusion of Functionality from Untrusted Control SphereN/A6.1 Medium0%Nov 4, 2026
CVE-2026-94460: Incorrect Default PermissionsN/A7.2 High0%Nov 4, 2026
CVE-2026-94459: Use of Default CredentialsN/A7.2 High0%Nov 4, 2026
CVE-2026-93900: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 4, 2026
CVE-2026-120554: Incorrect Authorization8.8 HighN/A1%Nov 4, 2026
CVE-2026-120422: Undefined Security WeaknessN/A8.9 High0%Nov 4, 2026
CVE-2026-115498: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 4, 2026
CVE-2026-111822: Undefined Security WeaknessN/AN/A0%Nov 4, 2026
CVE-2026-111821: Improper Input ValidationN/AN/A0%Nov 4, 2026
CVE-2026-111040: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)N/A5.1 Medium0%Nov 4, 2026
CVE-2026-111038: Improper Neutralization of Formula Elements in a CSV FileN/A7.3 High0%Nov 4, 2026
CVE-2026-111037: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Nov 4, 2026
CVE-2026-111036: Server-Side Request Forgery (SSRF)N/A8.4 High0%Nov 4, 2026
CVE-2026-110935: Improper Limitation of a Pathname to a Restricted Directory8.4 High8.6 High0%Nov 4, 2026
CVE-2026-110022: Download of Code Without Integrity Check8.4 High8.6 High0%Nov 4, 2026
CVE-2026-110021: Improper Verification of Cryptographic Signature6.2 Medium6.9 Medium0%Nov 4, 2026
CVE-2026-108949: Missing Release of Memory after Effective LifetimeN/AN/A0%Nov 4, 2026
CVE-2026-19731: Improper Limitation of a Pathname to a Restricted Directory3.3 LowN/A0%Nov 4, 2026
CVE-2026-19721: Improper Restriction of XML External Entity Reference3.3 LowN/A0%Nov 4, 2026
CVE-2026-114426: Uncontrolled Resource ConsumptionN/A8.7 High0%Nov 4, 2026
CVE-2026-114425: External Control of File Name or PathN/A9.2 Critical0%Nov 4, 2026
CVE-2026-114424: Improper Neutralization of Directives in Dynamically Evaluated CodeN/A9.2 Critical0%Nov 4, 2026
CVE-2026-114421: Weak Password Recovery Mechanism for Forgotten PasswordN/A8.3 High0%Nov 4, 2026
1026-1050 of 420870
‹›