The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121966: Exposure of Data Element to Wrong Session8.7 High7.0 High0%Nov 4, 2026
CVE-2026-121965: Improperly Controlled Modification of Object Prototype Attributes5.3 Medium6.0 Medium0%Nov 4, 2026
CVE-2026-121964: Heap-based Buffer Overflow7.5 High8.7 High1%Nov 4, 2026
CVE-2026-121963: Concurrent Execution using Shared Resource with Improper Synchronization5.9 Medium8.2 High0%Nov 4, 2026
CVE-2026-121962: Out-of-bounds Write8.1 High7.2 High0%Nov 4, 2026
CVE-2026-121961: Concurrent Execution using Shared Resource with Improper Synchronization5.9 Medium8.2 High0%Nov 4, 2026
CVE-2026-121960: Reachable Assertion7.5 High8.7 High1%Nov 4, 2026
CVE-2026-121959: Loop with Unreachable Exit Condition6.5 Medium7.1 High0%Nov 4, 2026
CVE-2026-121958: Heap-based Buffer Overflow7.5 High8.7 High0%Nov 4, 2026
CVE-2026-121957: Concurrent Execution using Shared Resource with Improper Synchronization7.0 High8.7 High0%Nov 4, 2026
CVE-2026-121956: Double Free7.5 High8.7 High0%Nov 4, 2026
CVE-2026-121955: Use After Free6.5 Medium8.7 High0%Nov 4, 2026
CVE-2026-121954: Out-of-bounds Write6.5 Medium7.1 High0%Nov 4, 2026
CVE-2026-121953: Use After Free9.8 Critical9.3 Critical1%Nov 4, 2026
CVE-2026-121952: Out-of-bounds Write9.8 Critical9.3 Critical1%Nov 4, 2026
CVE-2026-121951: Reachable Assertion7.5 High8.7 High0%Nov 4, 2026
CVE-2026-121950: Heap-based Buffer Overflow6.5 Medium7.1 High0%Nov 4, 2026
CVE-2026-119746: Improper Restriction of Excessive Authentication Attempts5.9 Medium8.2 High0%Nov 4, 2026
CVE-2026-109518: UNIX Hard LinkN/A7.7 High1%Nov 4, 2026
CVE-2026-106554: Inefficient Algorithmic ComplexityN/AN/A0%Nov 4, 2026
CVE-2026-66736: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 4, 2026
CVE-2026-39431: Undefined Security Weakness7.2 HighN/A0%Nov 4, 2026
CVE-2026-39430: Undefined Security Weakness9.8 CriticalN/A0%Nov 4, 2026
CVE-2026-122008: Server-Side Request Forgery (SSRF)5.0 Medium5.3 Medium0%Nov 4, 2026
CVE-2026-122007: Authorization Bypass Through User-Controlled Key6.5 Medium7.4 High0%Nov 4, 2026
1051-1075 of 425038
‹›