The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-90628: Stack-based Buffer Overflow7.3 HighN/A0%Nov 4, 2026
CVE-2026-90627: Files or Directories Accessible to External Parties5.5 MediumN/A0%Nov 4, 2026
CVE-2026-90626: Out-of-bounds Write7.3 HighN/A0%Nov 4, 2026
CVE-2026-90624: Out-of-bounds Write7.3 HighN/A0%Nov 4, 2026
CVE-2026-59268: Out-of-bounds Write7.3 HighN/A0%Nov 4, 2026
CVE-2026-59264: Uncontrolled Search Path Element7.8 HighN/A0%Nov 4, 2026
CVE-2026-59263: Acceptance of Extraneous Untrusted Data With Trusted Data5.5 Medium1.9 Low0%Nov 4, 2026
CVE-2026-108946: Improper Input ValidationN/AN/A0%Nov 4, 2026
CVE-2026-108500: Improper Input ValidationN/AN/A0%Nov 4, 2026
CVE-2026-103582: Memory Allocation with Excessive Size ValueN/AN/A0%Nov 4, 2026
CVE-2026-102704: Protection Mechanism Failure4.4 MediumN/A0%Nov 4, 2026
CVE-2026-102703: Incorrect Type Conversion or Cast4.4 MediumN/A0%Nov 4, 2026
CVE-2026-100302: Allocation of Resources Without Limits or ThrottlingN/A7.1 High1%Nov 4, 2026
CVE-2026-100300: Improper Handling of Exceptional ConditionsN/A8.7 High0%Nov 4, 2026
CVE-2026-100252: Incorrect AuthorizationN/A8.6 High1%Nov 4, 2026
CVE-2026-100235: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A6.0 Medium0%Nov 4, 2026
CVE-2026-59267: Heap-based Buffer OverflowN/A5.8 Medium0%Nov 4, 2026
CVE-2026-115448: Allocation of Resources Without Limits or ThrottlingN/A8.7 High1%Nov 4, 2026
CVE-2026-95649: Inclusion of Functionality from Untrusted Control SphereN/A6.1 Medium0%Nov 4, 2026
CVE-2026-94460: Incorrect Default PermissionsN/A7.2 High0%Nov 4, 2026
CVE-2026-94459: Use of Default CredentialsN/A7.2 High0%Nov 4, 2026
CVE-2026-93900: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 4, 2026
CVE-2026-120554: Incorrect Authorization8.8 HighN/A1%Nov 4, 2026
CVE-2026-120422: Undefined Security WeaknessN/A8.9 High0%Nov 4, 2026
CVE-2026-115498: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 4, 2026
1126-1150 of 425038
‹›