The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-69136: Improper Neutralization of Special Elements used in an SQL Command7.1 HighN/A0%Nov 5, 2026
CVE-2026-69135: Improper Neutralization of Special Elements used in an SQL Command7.1 HighN/A0%Nov 5, 2026
CVE-2026-69134: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Nov 5, 2026
CVE-2026-63218: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Nov 5, 2026
CVE-2026-63217: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Nov 5, 2026
CVE-2026-63215: Improper Neutralization of Special Elements used in an SQL Command8.3 HighN/A0%Nov 5, 2026
CVE-2026-63214: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Nov 5, 2026
CVE-2026-63213: Improper Limitation of a Pathname to a Restricted Directory7.2 HighN/A1%Nov 5, 2026
CVE-2026-63111: Missing AuthorizationN/A7.1 High0%Nov 5, 2026
CVE-2026-61653: Improper Neutralization of Special Elements used in an SQL Command8.3 HighN/A0%Nov 5, 2026
CVE-2026-61651: Improper Neutralization of Special Elements used in an SQL Command8.3 HighN/A0%Nov 5, 2026
CVE-2026-61650: Missing Authorization8.1 HighN/A0%Nov 5, 2026
CVE-2026-61649: Server-Side Request Forgery (SSRF)7.7 HighN/A0%Nov 5, 2026
CVE-2026-61648: Improper Neutralization of Special Elements used in an SQL Command8.3 HighN/A0%Nov 5, 2026
CVE-2026-123273: Loop with Unreachable Exit Condition6.5 Medium7.1 High0%Nov 5, 2026
CVE-2026-123272: Origin Validation Error8.0 High5.1 Medium0%Nov 5, 2026
CVE-2026-123271: Origin Validation Error8.0 High5.1 Medium0%Nov 5, 2026
CVE-2026-123208: Missing Authentication for Critical Function8.8 High7.7 High0%Nov 5, 2026
CVE-2026-123207: Time-of-check Time-of-use (TOCTOU) Race Condition3.1 Low2.3 Low0%Nov 5, 2026
CVE-2026-123206: Missing Authentication for Critical Function3.7 Low6.3 Medium0%Nov 5, 2026
CVE-2026-123205: Heap-based Buffer Overflow6.5 Medium8.3 High0%Nov 5, 2026
CVE-2026-123204: Server-Side Request Forgery (SSRF)4.3 Medium5.3 Medium0%Nov 5, 2026
CVE-2026-123203: Stack-based Buffer Overflow6.1 Medium6.9 Medium0%Nov 5, 2026
CVE-2026-123202: Stack-based Buffer Overflow7.5 High8.7 High1%Nov 5, 2026
CVE-2026-123201: Server-Side Request Forgery (SSRF)5.3 Medium6.3 Medium0%Nov 5, 2026
1051-1075 of 565269
‹›