The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120330: Missing AuthorizationN/A7.1 High0%Nov 3, 2026
CVE-2026-120329: Improper Neutralization of Special Elements in Output Used by a Downstream ComponentN/A5.3 Medium0%Nov 3, 2026
CVE-2026-120328: Authorization Bypass Through User-Controlled KeyN/A6.9 Medium0%Nov 3, 2026
CVE-2026-120327: URL Redirection to Untrusted SiteN/A5.3 Medium0%Nov 3, 2026
CVE-2026-119843: Reachable Assertion6.5 MediumN/A1%Nov 3, 2026
CVE-2026-119724: Improper Restriction of Recursive Entity References in DTDsN/AN/A0%Nov 3, 2026
CVE-2026-119641: Improper Input ValidationN/AN/A0%Nov 3, 2026
CVE-2026-92610: Improper Limitation of a Pathname to a Restricted DirectoryN/AN/A0%Nov 3, 2026
CVE-2026-91075: Undefined Security Weakness5.3 MediumN/A0%Nov 3, 2026
CVE-2026-121024: Incorrect Authorization5.4 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121023: Insertion of Sensitive Information into Log File5.5 Medium6.8 Medium0%Nov 3, 2026
CVE-2026-121022: Use of Default Password8.1 High9.2 Critical0%Nov 3, 2026
CVE-2026-121021: Plaintext Storage of a Password5.5 Medium6.8 Medium0%Nov 3, 2026
CVE-2026-121020: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-118448: Use of Uninitialized VariableN/A6.9 Medium0%Nov 3, 2026
CVE-2026-118447: Use of Uninitialized VariableN/A4.8 Medium0%Nov 3, 2026
CVE-2026-118446: Use After FreeN/A6.9 Medium0%Nov 3, 2026
CVE-2026-118445: Use After FreeN/A6.9 Medium0%Nov 3, 2026
CVE-2026-118444: Out-of-bounds ReadN/A4.8 Medium0%Nov 3, 2026
CVE-2026-115231: Improper Privilege ManagementN/A8.5 High0%Nov 3, 2026
CVE-2026-113421: Use After FreeN/A7.3 High0%Nov 3, 2026
CVE-2026-109161: Buffer Copy without Checking Size of Input4.9 Medium6.9 Medium0%Nov 3, 2026
CVE-2026-105982: Improper Neutralization of Special Elements used in a Command7.2 High8.6 High0%Nov 3, 2026
CVE-2026-105981: Improper Neutralization of Special Elements used in an OS Command7.2 High8.6 High0%Nov 3, 2026
CVE-2026-105980: Improper Neutralization of Special Elements used in a Command7.2 High8.6 High0%Nov 3, 2026
1101-1125 of 418286
‹›