The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-82894: Use of Externally-Controlled Input to Select Classes or CodeN/AN/A0%Nov 5, 2026
CVE-2026-81828: Server-Side Request Forgery (SSRF)N/AN/A0%Nov 5, 2026
CVE-2026-81816: Improper Restriction of XML External Entity ReferenceN/AN/A0%Nov 5, 2026
CVE-2026-81815: Improper Neutralization of Special Elements used in an SQL CommandN/AN/A0%Nov 5, 2026
CVE-2026-81808: Missing AuthorizationN/AN/A0%Nov 5, 2026
CVE-2026-81744: Missing AuthorizationN/AN/A0%Nov 5, 2026
CVE-2026-81734: Missing AuthorizationN/AN/A0%Nov 5, 2026
CVE-2026-76152: Improper Limitation of a Pathname to a Restricted DirectoryN/AN/A0%Nov 5, 2026
CVE-2026-76150: Improper Limitation of a Pathname to a Restricted DirectoryN/AN/A0%Nov 5, 2026
CVE-2026-74841: Uncontrolled Resource ConsumptionN/AN/A0%Nov 5, 2026
CVE-2026-73580: Missing AuthorizationN/AN/A0%Nov 5, 2026
CVE-2026-73578: Authentication Bypass Using an Alternate Path or ChannelN/AN/A0%Nov 5, 2026
CVE-2026-73577: Authentication Bypass Using an Alternate Path or ChannelN/AN/A0%Nov 5, 2026
CVE-2026-71901: Improper Control of Resource Identifiers8.1 HighN/A0%Nov 5, 2026
CVE-2026-68524: Improper Control of Generation of CodeN/AN/A0%Nov 5, 2026
CVE-2026-66903: Path Traversal: '../filedir'6.5 MediumN/A0%Nov 5, 2026
CVE-2026-106716: ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open…N/AN/A0%Nov 5, 2026
CVE-2026-106715: NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…N/AN/A0%Nov 5, 2026
CVE-2026-106714: Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading…N/AN/A0%Nov 5, 2026
CVE-2026-106713: An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…N/AN/A0%Nov 5, 2026
Alpine Linux: CVE-2026-107891: Integer Overflow or Wraparound8.1 HighN/A1%Nov 5, 2026
CVE-2026-123096: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Nov 5, 2026
CVE-2026-123095: Improper Neutralization of CRLF Sequences7.5 High7.7 High0%Nov 5, 2026
CVE-2026-123094: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Nov 5, 2026
CVE-2026-122329: Stack-based Buffer Overflow7.8 High8.5 High0%Nov 5, 2026
1176-1200 of 578275
‹›