The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-28632: Undefined Security Weakness4.0 MediumN/A0%Nov 2, 2026
CVE-2026-28621: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-28597: Improper Input Validation8.4 HighN/A0%Nov 2, 2026
CVE-2026-28588: Improper Access Control8.4 HighN/A0%Nov 2, 2026
CVE-2026-120689: Uncontrolled RecursionN/A4.3 Medium0%Nov 2, 2026
CVE-2026-119740: Missing Authentication for Critical Function6.8 Medium7.0 High1%Nov 2, 2026
CVE-2026-119739: Out-of-bounds Write5.3 Medium6.9 Medium0%Nov 2, 2026
CVE-2026-119738: Loop with Unreachable Exit Condition5.3 Medium6.9 Medium0%Nov 2, 2026
CVE-2026-119737: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High1%Nov 2, 2026
CVE-2026-117082: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-116769: Undefined Security WeaknessN/A9.3 Critical0%Nov 2, 2026
CVE-2026-102435: Deserialization of Untrusted Data9.8 CriticalN/A1%Nov 2, 2026
CVE-2026-0053: Improper Access Control8.4 HighN/A0%Nov 2, 2026
CVE-2025-26433: Undefined Security Weakness8.4 HighN/A0%Nov 2, 2026
CVE-2025-22436: User Interface (UI) Misrepresentation of Critical Information8.4 HighN/A0%Nov 2, 2026
CVE-2026-81938: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A0%Nov 2, 2026
CVE-2026-67186: Undefined Security WeaknessN/AN/AN/ANov 2, 2026
CVE-2026-120656: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-120497: Improper Neutralization of Input During Web Page Generation5.0 Medium4.6 Medium0%Nov 2, 2026
CVE-2026-120067: Stack-based Buffer Overflow5.9 MediumN/A0%Nov 2, 2026
CVE-2026-120066: Incorrect Permission Assignment for Critical Resource5.3 MediumN/A0%Nov 2, 2026
CVE-2026-120065: Improper Neutralization of Special Elements used in an SQL Command7.1 HighN/A0%Nov 2, 2026
CVE-2026-120064: Improper Validation of Array Index7.5 HighN/A0%Nov 2, 2026
CVE-2026-120063: Stack-based Buffer Overflow5.9 MediumN/A0%Nov 2, 2026
CVE-2026-120062: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Nov 2, 2026
1201-1225 of 418286
‹›