The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120067: Stack-based Buffer Overflow5.9 MediumN/A0%Nov 2, 2026
CVE-2026-120066: Incorrect Permission Assignment for Critical Resource5.3 MediumN/A0%Nov 2, 2026
CVE-2026-120065: Improper Neutralization of Special Elements used in an SQL Command7.1 HighN/A0%Nov 2, 2026
CVE-2026-120064: Improper Validation of Array Index7.5 HighN/A0%Nov 2, 2026
CVE-2026-120063: Stack-based Buffer Overflow5.9 MediumN/A0%Nov 2, 2026
CVE-2026-120062: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Nov 2, 2026
CVE-2026-120061: Stack-based Buffer Overflow7.5 HighN/A0%Nov 2, 2026
CVE-2026-120060: Out-of-bounds Read5.9 MediumN/A0%Nov 2, 2026
CVE-2026-120059: Use of Externally-Controlled Format String6.8 MediumN/A0%Nov 2, 2026
CVE-2026-120058: Out-of-bounds Write7.5 HighN/A0%Nov 2, 2026
CVE-2026-120057: Buffer Copy without Checking Size of Input7.5 HighN/A0%Nov 2, 2026
CVE-2026-119736: Use of Hard-coded Credentials8.2 High8.8 High0%Nov 2, 2026
CVE-2026-119735: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Nov 2, 2026
CVE-2026-119734: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Nov 2, 2026
CVE-2026-119733: Missing Authorization8.1 High7.2 High0%Nov 2, 2026
CVE-2026-119732: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Nov 2, 2026
CVE-2026-119731: Insufficient Verification of Data Authenticity7.5 High8.7 High0%Nov 2, 2026
CVE-2026-117127: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-117069: Undefined Security Weakness7.5 HighN/A0%Nov 2, 2026
CVE-2026-105605: Authorization Bypass Through User-Controlled KeyN/A5.3 Medium0%Nov 2, 2026
CVE-2026-105606: Unrestricted Upload of File with Dangerous TypeN/A9.5 Critical0%Nov 2, 2026
CVE-2026-105604: Improper Neutralization of Special Elements used in an SQL CommandN/A9.3 Critical0%Nov 2, 2026
CVE-2026-105603: Unrestricted Upload of File with Dangerous TypeN/A9.4 Critical0%Nov 2, 2026
CVE-2026-120627: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-120416: Server-Side Request Forgery (SSRF)5.3 Medium6.9 Medium0%Nov 2, 2026
1176-1200 of 418744
‹›