The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-119734: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Nov 2, 2026
CVE-2026-119733: Missing Authorization8.1 High7.2 High0%Nov 2, 2026
CVE-2026-119732: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Nov 2, 2026
CVE-2026-119731: Insufficient Verification of Data Authenticity7.5 High8.7 High0%Nov 2, 2026
CVE-2026-117127: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-117069: Undefined Security Weakness7.5 HighN/A0%Nov 2, 2026
CVE-2026-105605: Authorization Bypass Through User-Controlled KeyN/A5.3 Medium0%Nov 2, 2026
CVE-2026-105606: Unrestricted Upload of File with Dangerous TypeN/A9.5 Critical0%Nov 2, 2026
CVE-2026-105604: Improper Neutralization of Special Elements used in an SQL CommandN/A9.3 Critical0%Nov 2, 2026
CVE-2026-105603: Unrestricted Upload of File with Dangerous TypeN/A9.4 Critical0%Nov 2, 2026
CVE-2026-120627: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-120416: Server-Side Request Forgery (SSRF)5.3 Medium6.9 Medium0%Nov 2, 2026
CVE-2026-119085: Improper Neutralization of Special Elements Used in a Template Engine8.8 High9.4 Critical0%Nov 2, 2026
CVE-2026-117068: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-117067: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-111048: Improper Neutralization of Input During Web Page GenerationN/A8.4 High0%Nov 2, 2026
CVE-2026-106808: Stack-based Buffer Overflow7.5 HighN/A1%Nov 2, 2026
CVE-2026-106806: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2024-12139: Improper Encoding or Escaping of Output4.3 MediumN/A0%Nov 2, 2026
CVE-2026-120630: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-120596: Loop with Unreachable Exit Condition7.5 HighN/A0%Nov 2, 2026
CVE-2026-119301: Improper Neutralization of Quoting Syntax7.9 High5.0 Medium0%Nov 2, 2026
CVE-2026-106807: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-106805: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-106804: Improper Input Validation7.5 HighN/A1%Nov 2, 2026
1151-1175 of 426484
‹›