The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121022: Use of Default Password8.1 High9.2 Critical0%Nov 3, 2026
CVE-2026-121021: Plaintext Storage of a Password5.5 Medium6.8 Medium0%Nov 3, 2026
CVE-2026-121020: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-118448: Use of Uninitialized VariableN/A6.9 Medium0%Nov 3, 2026
CVE-2026-118447: Use of Uninitialized VariableN/A4.8 Medium0%Nov 3, 2026
CVE-2026-118446: Use After FreeN/A6.9 Medium0%Nov 3, 2026
CVE-2026-118445: Use After FreeN/A6.9 Medium0%Nov 3, 2026
CVE-2026-118444: Out-of-bounds ReadN/A4.8 Medium0%Nov 3, 2026
CVE-2026-115231: Improper Privilege ManagementN/A8.5 High0%Nov 3, 2026
CVE-2026-113421: Use After FreeN/A7.3 High0%Nov 3, 2026
CVE-2026-109161: Buffer Copy without Checking Size of Input4.9 Medium6.9 Medium0%Nov 3, 2026
CVE-2026-105982: Improper Neutralization of Special Elements used in a Command7.2 High8.6 High0%Nov 3, 2026
CVE-2026-105981: Improper Neutralization of Special Elements used in an OS Command7.2 High8.6 High0%Nov 3, 2026
CVE-2026-105980: Improper Neutralization of Special Elements used in a Command7.2 High8.6 High0%Nov 3, 2026
CVE-2026-105979: Improper Neutralization of Special Elements used in a Command7.2 High8.6 High0%Nov 3, 2026
CVE-2026-105978: Improper Neutralization of Special Elements used in an OS Command7.2 High8.6 High0%Nov 3, 2026
CVE-2026-103327: Undefined Security Weakness5.3 MediumN/A0%Nov 3, 2026
CVE-2026-74846: Observable Timing DiscrepancyN/AN/A0%Nov 3, 2026
CVE-2026-4052: Missing Authorization9.8 CriticalN/A0%Nov 3, 2026
CVE-2026-16900: Improper Access Control7.5 HighN/A2%Nov 3, 2026
CVE-2026-13594: Improper Access Control9.1 CriticalN/A1%Nov 3, 2026
CVE-2026-120988: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 3, 2026
CVE-2026-103653: Out-of-bounds ReadN/A6.7 Medium0%Nov 3, 2026
CVE-2026-120987: Origin Validation ErrorN/AN/A0%Nov 3, 2026
CVE-2025-5769: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 3, 2026
1076-1100 of 418286
‹›