The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-117082: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-116769: Undefined Security WeaknessN/A9.3 Critical0%Nov 2, 2026
CVE-2026-102435: Deserialization of Untrusted Data9.8 CriticalN/A1%Nov 2, 2026
CVE-2026-0053: Improper Access Control8.4 HighN/A0%Nov 2, 2026
CVE-2025-26433: Undefined Security Weakness8.4 HighN/A0%Nov 2, 2026
CVE-2025-22436: User Interface (UI) Misrepresentation of Critical Information8.4 HighN/A0%Nov 2, 2026
CVE-2026-81938: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A0%Nov 2, 2026
CVE-2026-67186: Undefined Security WeaknessN/AN/AN/ANov 2, 2026
CVE-2026-120656: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-120497: Improper Neutralization of Input During Web Page Generation5.0 Medium4.6 Medium0%Nov 2, 2026
CVE-2026-120067: Stack-based Buffer Overflow5.9 MediumN/A0%Nov 2, 2026
CVE-2026-120066: Incorrect Permission Assignment for Critical Resource5.3 MediumN/A0%Nov 2, 2026
CVE-2026-120065: Improper Neutralization of Special Elements used in an SQL Command7.1 HighN/A0%Nov 2, 2026
CVE-2026-120064: Improper Validation of Array Index7.5 HighN/A0%Nov 2, 2026
CVE-2026-120063: Stack-based Buffer Overflow5.9 MediumN/A0%Nov 2, 2026
CVE-2026-120062: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Nov 2, 2026
CVE-2026-120061: Stack-based Buffer Overflow7.5 HighN/A0%Nov 2, 2026
CVE-2026-120060: Out-of-bounds Read5.9 MediumN/A0%Nov 2, 2026
CVE-2026-120059: Use of Externally-Controlled Format String6.8 MediumN/A0%Nov 2, 2026
CVE-2026-120058: Out-of-bounds Write7.5 HighN/A0%Nov 2, 2026
CVE-2026-120057: Buffer Copy without Checking Size of Input7.5 HighN/A0%Nov 2, 2026
CVE-2026-119736: Use of Hard-coded Credentials8.2 High8.8 High0%Nov 2, 2026
CVE-2026-119735: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Nov 2, 2026
CVE-2026-119734: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Nov 2, 2026
CVE-2026-119733: Missing Authorization8.1 High7.2 High0%Nov 2, 2026
1201-1225 of 418286
‹›