The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-79405: Improper Input Validation7.5 HighN/A0%Nov 4, 2026
CVE-2026-121803: Undefined Security Weakness9.3 CriticalN/AN/ANov 4, 2026
CVE-2026-121802: Origin Validation Error9.1 CriticalN/A0%Nov 4, 2026
CVE-2026-121618: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium5.5 Medium1%Nov 4, 2026
CVE-2026-121617: Out-of-bounds Write7.5 High7.7 High0%Nov 4, 2026
CVE-2026-121616: Out-of-bounds Write5.3 Medium5.5 Medium0%Nov 4, 2026
CVE-2026-121615: Improper Authentication10.0 Critical9.3 Critical1%Nov 4, 2026
CVE-2026-84730: Stack-based Buffer OverflowN/A8.7 High0%Nov 4, 2026
CVE-2026-84729: Out-of-bounds WriteN/A7.2 High0%Nov 4, 2026
CVE-2026-121610: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Nov 4, 2026
CVE-2026-121609: Use of Hard-coded Credentials10.0 Critical9.3 Critical1%Nov 4, 2026
CVE-2026-121608: Improper Neutralization of Special Elements used in an OS Command7.3 High5.5 Medium1%Nov 4, 2026
CVE-2026-121607: Improper Neutralization of Special Elements used in an OS Command10.0 Critical9.3 Critical2%Nov 4, 2026
CVE-2026-112116: Exposed IOCTL with Insufficient Access ControlN/A8.5 High0%Nov 4, 2026
CVE-2026-110464: Missing AuthorizationN/A6.9 Medium0%Nov 4, 2026
CVE-2026-121606: Improper Verification of Cryptographic Signature10.0 Critical9.3 Critical0%Nov 4, 2026
CVE-2026-121600: Stack-based Buffer Overflow9.9 Critical8.6 High0%Nov 4, 2026
CVE-2026-121599: Stack-based Buffer Overflow9.9 Critical8.6 High0%Nov 4, 2026
CVE-2026-121598: Stack-based Buffer Overflow9.9 Critical8.6 High0%Nov 4, 2026
CVE-2026-92211: Double Free7.8 HighN/A0%Nov 4, 2026
CVE-2026-92200: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Nov 4, 2026
CVE-2026-92199: Use of Hard-coded Cryptographic Key7.8 HighN/A0%Nov 4, 2026
CVE-2026-92198: Improper Restriction of XML External Entity Reference8.2 HighN/A3%Nov 4, 2026
CVE-2026-92197: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Nov 4, 2026
CVE-2026-92196: Improper Neutralization of Special Elements Used in a Template Engine7.2 HighN/A1%Nov 4, 2026
1076-1100 of 423720
‹›