The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-99220: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-99219: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-99218: Undefined Security Weakness7.0 HighN/A0%Nov 2, 2026
CVE-2026-99217: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-88809: Server-Side Request Forgery (SSRF)7.6 HighN/A0%Nov 2, 2026
CVE-2026-2102: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Nov 2, 2026
CVE-2026-16306: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-120501: Files or Directories Accessible to External Parties5.3 Medium6.9 Medium0%Nov 2, 2026
CVE-2026-120500: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Nov 2, 2026
CVE-2026-115654: Improper Access ControlN/A6.9 Medium0%Nov 2, 2026
CVE-2026-115653: Out-of-bounds WriteN/A7.0 High0%Nov 2, 2026
CVE-2026-114408: Unchecked Return ValueN/A8.7 High0%Nov 2, 2026
CVE-2026-109142: Authorization Bypass Through User-Controlled Key8.4 HighN/A0%Nov 2, 2026
CVE-2026-109141: Authorization Bypass Through User-Controlled Key8.4 HighN/A0%Nov 2, 2026
CVE-2026-109140: Reusing a Nonce, Key Pair in Encryption8.4 HighN/A0%Nov 2, 2026
CVE-2026-99242: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-99241: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-94290: Execution with Unnecessary Privileges9.1 CriticalN/A0%Nov 2, 2026
CVE-2026-104080: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High1%Nov 2, 2026
CVE-2026-77881: Improper Neutralization of Special Elements used in an SQL Command5.5 Medium6.8 Medium0%Nov 2, 2026
CVE-2026-77880: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High1%Nov 2, 2026
CVE-2026-77879: Improper Neutralization of Special Elements used in an SQL Command7.1 High8.4 High0%Nov 2, 2026
CVE-2026-77878: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High1%Nov 2, 2026
CVE-2026-77877: Missing Authentication for Critical Function7.8 High8.5 High0%Nov 2, 2026
CVE-2026-77876: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High2%Nov 2, 2026
1201-1225 of 426484
‹›