The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-123096: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Nov 5, 2026
CVE-2026-123095: Improper Neutralization of CRLF Sequences7.5 High7.7 High0%Nov 5, 2026
CVE-2026-123094: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Nov 5, 2026
CVE-2026-122329: Stack-based Buffer Overflow7.8 High8.5 High0%Nov 5, 2026
CVE-2026-122328: Stack-based Buffer Overflow7.8 High8.5 High0%Nov 5, 2026
CVE-2026-122327: Missing Authorization4.3 Medium5.3 Medium0%Nov 5, 2026
CVE-2026-122325: Authorization Bypass Through User-Controlled Key3.1 Low2.3 Low0%Nov 5, 2026
CVE-2026-122324: Authorization Bypass Through User-Controlled Key3.1 Low2.3 Low0%Nov 5, 2026
CVE-2026-122317: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Nov 5, 2026
CVE-2026-115738: Trellix DLP on-prem extensions: SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated…N/A7.1 High0%Nov 5, 2026
CVE-2026-119744: Authentication Bypass by Spoofing8.8 High7.7 High0%Nov 5, 2026
CVE-2026-97356: External Control of File Name or PathN/AN/A0%Nov 5, 2026
CVE-2026-97355: Use of Hard-coded PasswordN/AN/A0%Nov 5, 2026
CVE-2026-92887: Missing Authentication for Critical FunctionN/AN/A0%Nov 5, 2026
CVE-2026-85627: Improper Neutralization of Special Elements Used in a Template Engine8.8 HighN/A0%Nov 5, 2026
CVE-2026-84183: Incorrect Authorization8.8 HighN/A1%Nov 5, 2026
CVE-2026-83542: Improper Control of Generation of Code9.8 CriticalN/A1%Nov 5, 2026
CVE-2026-83538: Missing AuthorizationN/AN/A0%Nov 5, 2026
CVE-2026-82960: Improper Control of Generation of Code8.8 HighN/A1%Nov 5, 2026
CVE-2026-82912: Improper Neutralization of Special Elements used in an Expression Language Statement8.8 HighN/A1%Nov 5, 2026
CVE-2026-82910: Improper Neutralization of Special Elements Used in a Template Engine8.8 HighN/A1%Nov 5, 2026
CVE-2026-82907: Authentication Bypass by Capture-replay9.8 CriticalN/A1%Nov 5, 2026
CVE-2026-123028: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Nov 5, 2026
CVE-2026-117691: Red Hat: A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak9.1 CriticalN/A0%Nov 5, 2026
Apache OFBiz: CVE-2026-114277: Authentication bypass by assumed-immutable data vulnerability.N/AN/A0%Nov 5, 2026
1201-1225 of 420254
‹›