The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-118237: Out-of-bounds ReadN/A5.3 Medium0%Nov 3, 2026
CVE-2026-116669: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Nov 3, 2026
CVE-2026-116668: Uncontrolled Resource Consumption4.3 MediumN/A0%Nov 3, 2026
CVE-2026-116667: Incorrect Authorization4.2 MediumN/A0%Nov 3, 2026
CVE-2026-116666: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Nov 3, 2026
CVE-2026-116665: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Nov 3, 2026
CVE-2026-116664: Incorrect Authorization3.1 LowN/A0%Nov 3, 2026
CVE-2026-116663: Missing Authorization6.5 MediumN/A0%Nov 3, 2026
CVE-2026-116661: Incorrect Authorization6.5 MediumN/A0%Nov 3, 2026
CVE-2026-116654: Improper Input Validation6.5 MediumN/A0%Nov 3, 2026
CVE-2026-116653: Improper Input Validation4.3 MediumN/A0%Nov 3, 2026
CVE-2026-116652: Function Call with Incorrectly Specified Arguments4.3 MediumN/A0%Nov 3, 2026
CVE-2026-116651: Improper Neutralization of Special Elements used in an OS Command7.5 HighN/A0%Nov 3, 2026
CVE-2026-116650: Improper Neutralization of Special Elements used in an OS Command7.5 HighN/A0%Nov 3, 2026
CVE-2026-116648: Improper Neutralization of Formula Elements in a CSV File4.1 MediumN/A0%Nov 3, 2026
CVE-2026-116646: Allocation of Resources Without Limits or Throttling4.3 MediumN/A0%Nov 3, 2026
CVE-2026-111085: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 3, 2026
CVE-2026-110288: Cross-Site Request Forgery (CSRF)N/A5.3 Medium0%Nov 3, 2026
CVE-2026-109836: Exposed IOCTL with Insufficient Access Control6.7 Medium8.4 High0%Nov 3, 2026
CVE-2026-108516: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 3, 2026
CVE-2026-108327: Improper Limitation of a Pathname to a Restricted Directory5.0 MediumN/A0%Nov 3, 2026
CVE-2026-108324: Integer Overflow or Wraparound6.5 MediumN/A0%Nov 3, 2026
CVE-2026-107916: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 3, 2026
CVE-2026-104608: Use After FreeN/A7.7 High0%Nov 3, 2026
CVE-2026-103429: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 3, 2026
1201-1225 of 420275
‹›