The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-113866: Mozilla Thunderbird: When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service…5.9 MediumN/AN/AOct 20, 2026
CVE-2026-113725: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments7.8 HighN/AN/AOct 20, 2026
CVE-2026-113724: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments4.5 MediumN/AN/AOct 20, 2026
CVE-2026-113723: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A7.1 HighN/AOct 20, 2026
CVE-2026-113722: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments7.8 HighN/AN/AOct 20, 2026
CVE-2026-113721: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments4.5 MediumN/AN/AOct 20, 2026
CVE-2026-113720: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A4.4 MediumN/AOct 20, 2026
CVE-2026-113719: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments4.5 MediumN/AN/AOct 20, 2026
CVE-2026-113718: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A7.1 HighN/AOct 20, 2026
CVE-2026-113717: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A2.3 LowN/AOct 20, 2026
CVE-2026-113716: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments4.5 MediumN/AN/AOct 20, 2026
CVE-2026-113715: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A2.0 LowN/AOct 20, 2026
CVE-2026-112380: Amazon Kiro Crew: Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an…9.9 Critical9.0 CriticalN/AOct 20, 2026
CVE-2026-107692: Gaijin Entertainment War Thunder: The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after…4.8 MediumN/AN/AOct 20, 2026
CVE-2026-97406: Xerj Console API: XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token…N/AN/AN/AOct 20, 2026
CVE-2026-75997: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-75751: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-75747: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-48279: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-21356: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-21270: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-21266: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-113810: Stormshield Stormshield Network Security: A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal7.0 HighN/AN/AOct 20, 2026
CVE-2026-113808: Stormshield Stormshield Network Security: A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal7.1 HighN/AN/AOct 20, 2026
CVE-2026-113714: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A2.3 LowN/AOct 20, 2026
1651-1675 of 412130
‹›