The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121607: Improper Neutralization of Special Elements used in an OS Command10.0 Critical9.3 Critical2%Nov 4, 2026
CVE-2026-112116: Exposed IOCTL with Insufficient Access ControlN/A8.5 High0%Nov 4, 2026
CVE-2026-110464: Missing AuthorizationN/A6.9 Medium0%Nov 4, 2026
CVE-2026-121606: Improper Verification of Cryptographic Signature10.0 Critical9.3 Critical0%Nov 4, 2026
CVE-2026-121600: Stack-based Buffer Overflow9.9 Critical8.6 High0%Nov 4, 2026
CVE-2026-121599: Stack-based Buffer Overflow9.9 Critical8.6 High0%Nov 4, 2026
CVE-2026-121598: Stack-based Buffer Overflow9.9 Critical8.6 High0%Nov 4, 2026
CVE-2026-92211: Double Free7.8 HighN/A0%Nov 4, 2026
CVE-2026-92200: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Nov 4, 2026
CVE-2026-92199: Use of Hard-coded Cryptographic Key7.8 HighN/A0%Nov 4, 2026
CVE-2026-92198: Improper Restriction of XML External Entity Reference8.2 HighN/A3%Nov 4, 2026
CVE-2026-92197: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Nov 4, 2026
CVE-2026-92196: Improper Neutralization of Special Elements Used in a Template Engine7.2 HighN/A1%Nov 4, 2026
CVE-2026-92195: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Nov 4, 2026
CVE-2026-92194: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Nov 4, 2026
CVE-2026-92193: External Control of File Name or Path6.5 MediumN/A2%Nov 4, 2026
CVE-2026-92192: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Nov 4, 2026
CVE-2026-92191: Incorrect Authorization8.8 HighN/A1%Nov 4, 2026
CVE-2026-92190: Deserialization of Untrusted Data9.8 CriticalN/A1%Nov 4, 2026
CVE-2026-92189: External Control of File Name or Path9.8 CriticalN/A1%Nov 4, 2026
CVE-2026-92188: Missing Authentication for Critical Function9.8 CriticalN/A1%Nov 4, 2026
CVE-2026-92187: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Nov 4, 2026
CVE-2026-92186: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Nov 4, 2026
CVE-2026-92185: Improper Restriction of XML External Entity Reference7.2 HighN/A2%Nov 4, 2026
CVE-2026-121597: Stack-based Buffer Overflow9.9 Critical8.6 High1%Nov 4, 2026
1126-1150 of 420275
‹›