The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-115654: Improper Access ControlN/A6.9 Medium0%Nov 2, 2026
CVE-2026-115653: Out-of-bounds WriteN/A7.0 High0%Nov 2, 2026
CVE-2026-109142: Authorization Bypass Through User-Controlled Key8.4 HighN/A0%Nov 2, 2026
CVE-2026-109141: Authorization Bypass Through User-Controlled Key8.4 HighN/A0%Nov 2, 2026
CVE-2026-109140: Reusing a Nonce, Key Pair in Encryption8.4 HighN/A0%Nov 2, 2026
CVE-2026-99242: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-99241: Undefined Security WeaknessN/AN/A0%Nov 2, 2026
CVE-2026-94290: Execution with Unnecessary Privileges9.1 CriticalN/A0%Nov 2, 2026
CVE-2026-104080: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High1%Nov 2, 2026
CVE-2026-77881: Improper Neutralization of Special Elements used in an SQL Command5.5 Medium6.8 Medium0%Nov 2, 2026
CVE-2026-77880: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High1%Nov 2, 2026
CVE-2026-77879: Improper Neutralization of Special Elements used in an SQL Command7.1 High8.4 High0%Nov 2, 2026
CVE-2026-77878: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High1%Nov 2, 2026
CVE-2026-77877: Missing Authentication for Critical Function7.8 High8.5 High0%Nov 2, 2026
CVE-2026-77876: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High2%Nov 2, 2026
CVE-2026-73696: Execution After Redirect (EAR)8.1 High8.6 High1%Nov 2, 2026
CVE-2026-120492: Server-Side Request Forgery (SSRF)5.4 Medium6.3 Medium0%Nov 2, 2026
CVE-2026-120491: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Nov 2, 2026
CVE-2026-120489: Incorrect Authorization4.3 Medium5.3 Medium0%Nov 2, 2026
CVE-2026-120488: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Nov 2, 2026
CVE-2026-120487: Incorrect Authorization7.2 High8.6 High0%Nov 2, 2026
CVE-2026-120460: Authorization Bypass Through User-Controlled Key8.8 High8.7 High0%Nov 2, 2026
CVE-2026-120459: Improper Verification of Cryptographic Signature7.4 High9.1 Critical0%Nov 2, 2026
CVE-2026-120458: Loop with Unreachable Exit Condition5.5 Medium6.8 Medium0%Nov 2, 2026
CVE-2026-120457: Unsigned to Signed Conversion Error5.3 Medium5.8 Medium0%Nov 2, 2026
1201-1225 of 426484
‹›