The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-49922: Unintended Proxy or Intermediary8.4 HighN/A0%Nov 2, 2026
CVE-2026-49912: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-45514: Protection Mechanism Failure8.4 HighN/A0%Nov 2, 2026
CVE-2026-28665: Undefined Security Weakness8.4 HighN/A0%Nov 2, 2026
CVE-2026-28645: Protection Mechanism Failure6.8 MediumN/A0%Nov 2, 2026
CVE-2026-28643: Undefined Security Weakness6.2 MediumN/A0%Nov 2, 2026
CVE-2026-28632: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-28621: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-28597: Improper Input Validation8.4 HighN/A0%Nov 2, 2026
CVE-2026-28588: Improper Access Control8.4 HighN/A0%Nov 2, 2026
CVE-2026-120689: Uncontrolled RecursionN/A4.3 Medium0%Nov 2, 2026
CVE-2026-119740: Missing Authentication for Critical Function6.8 Medium7.0 High1%Nov 2, 2026
CVE-2026-119739: Out-of-bounds Write5.3 Medium6.9 Medium0%Nov 2, 2026
CVE-2026-119738: Loop with Unreachable Exit Condition5.3 Medium6.9 Medium0%Nov 2, 2026
CVE-2026-119737: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High1%Nov 2, 2026
CVE-2026-117082: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-116769: Undefined Security WeaknessN/A9.3 Critical0%Nov 2, 2026
CVE-2026-102435: Deserialization of Untrusted Data9.8 CriticalN/A1%Nov 2, 2026
CVE-2026-0053: Undefined Security Weakness8.4 HighN/A0%Nov 2, 2026
CVE-2025-26433: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2025-22436: Undefined Security Weakness8.4 HighN/A0%Nov 2, 2026
CVE-2026-58853: Improper Restriction of Operations within the Bounds of a Memory BufferN/AN/A0%Nov 2, 2026
CVE-2026-81938: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A0%Nov 2, 2026
CVE-2026-67186: Undefined Security WeaknessN/AN/AN/ANov 2, 2026
CVE-2026-120656: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
1076-1100 of 422391
‹›