The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-111821: Improper Input ValidationN/AN/A0%Nov 4, 2026
CVE-2026-111040: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)N/A5.1 Medium0%Nov 4, 2026
CVE-2026-111038: Improper Neutralization of Formula Elements in a CSV FileN/A7.3 High0%Nov 4, 2026
CVE-2026-111037: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Nov 4, 2026
CVE-2026-111036: Server-Side Request Forgery (SSRF)N/A8.4 High0%Nov 4, 2026
CVE-2026-110935: Improper Limitation of a Pathname to a Restricted Directory8.4 High8.6 High0%Nov 4, 2026
CVE-2026-110022: Download of Code Without Integrity Check8.4 High8.6 High0%Nov 4, 2026
CVE-2026-110021: Improper Verification of Cryptographic Signature6.2 Medium6.9 Medium0%Nov 4, 2026
CVE-2026-108949: Missing Release of Memory after Effective LifetimeN/AN/A0%Nov 4, 2026
CVE-2026-19731: Improper Limitation of a Pathname to a Restricted Directory3.3 LowN/A0%Nov 4, 2026
CVE-2026-19721: Improper Restriction of XML External Entity Reference3.3 LowN/A0%Nov 4, 2026
CVE-2026-114426: Uncontrolled Resource ConsumptionN/A8.7 High0%Nov 4, 2026
CVE-2026-114425: External Control of File Name or PathN/A9.2 Critical0%Nov 4, 2026
CVE-2026-114424: Improper Neutralization of Directives in Dynamically Evaluated CodeN/A9.2 Critical0%Nov 4, 2026
CVE-2026-114421: Weak Password Recovery Mechanism for Forgotten PasswordN/A8.3 High0%Nov 4, 2026
CVE-2026-114420: Improper Neutralization of Special Elements used in an LDAP QueryN/A6.9 Medium0%Nov 4, 2026
CVE-2026-62126: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Nov 4, 2026
CVE-2026-62007: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 4, 2026
CVE-2026-57775: Authentication Bypass Using an Alternate Path or Channel5.3 MediumN/A0%Nov 4, 2026
CVE-2026-57666: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 4, 2026
CVE-2026-57639: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 4, 2026
CVE-2026-56065: Insertion of Sensitive Information into Externally-Accessible File or Directory7.5 HighN/A0%Nov 4, 2026
CVE-2026-54861: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 4, 2026
CVE-2026-119477: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 4, 2026
CVE-2026-119366: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 4, 2026
1151-1175 of 425038
‹›