The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-44519: open-quantum-safe liboqs: liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms5.1 MediumN/AN/ANov 6, 2026
CVE-2026-85726: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…7.5 HighN/AN/ANov 6, 2026
CVE-2026-85743: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox8.2 HighN/AN/ANov 6, 2026
CVE-2026-123489: craftcms cms: Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains a blind SQL injection vulnerability because the…7.1 High7.1 HighN/ANov 6, 2026
CVE-2026-112341: wazuh: Wazuh versions from 4.0.0 before 4.14.9 contain a sql injection vulnerability in WazuhDBBackend._substitute_params due…6.5 Medium7.1 HighN/ANov 6, 2026
CVE-2026-88983: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows5.0 MediumN/A0%Nov 5, 2026
CVE-2026-63489: Improper Neutralization of Special Elements in Data Query Logic7.6 HighN/A0%Nov 3, 2026
CVE-2026-120204: Improper Limitation of a Pathname to a Restricted Directory5.6 Medium6.3 Medium0%Oct 31, 2026
CVE-2026-119342: Improper Input Validation5.3 MediumN/A0%Oct 30, 2026
CVE-2026-61789: Interpretation ConflictN/A6.1 Medium0%Oct 30, 2026
CVE-2026-118766: Server-Side Request Forgery (SSRF)6.1 MediumN/A0%Oct 29, 2026
CVE-2026-117471: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Oct 27, 2026
CVE-2026-116818: Improper Neutralization of Special Elements used in an SQL Command8.2 High8.8 High0%Oct 27, 2026
CVE-2026-65626: Observable DiscrepancyN/A5.9 Medium0%Oct 26, 2026
CVE-2026-71456: Use of Hard-coded Cryptographic KeyN/A8.5 High0%Oct 26, 2026
CVE-2026-114820: Use of a Broken or Risky Cryptographic Algorithm9.1 CriticalN/A0%Oct 24, 2026
CVE-2026-115938: Improper Neutralization of Special Elements Used in a Template Engine8.8 High8.7 High0%Oct 23, 2026
CVE-2026-99016: Undefined Security Weakness7.8 HighN/A0%Oct 23, 2026
CVE-2026-114634: Server-Side Request Forgery (SSRF)4.3 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-91403: Use of a Broken or Risky Cryptographic Algorithm9.1 CriticalN/A0%Oct 21, 2026
CVE-2026-113461: Untrusted Search PathN/A5.2 Medium0%Oct 21, 2026
CVE-2026-113799: Insertion of Sensitive Information into Log File5.3 MediumN/A0%Oct 21, 2026
CVE-2026-91668: Improper Privilege Management8.8 HighN/A0%Oct 20, 2026
CVE-2026-91665: Improper Authentication9.8 CriticalN/A0%Oct 20, 2026
CVE-2026-91664: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 20, 2026
1-25 of 13409
›