The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-89209: Authentication Bypass by Capture-replay6.8 Medium7.6 HighN/AOct 26, 2026
CVE-2026-116469: Improper Input ValidationN/A7.1 HighN/AOct 26, 2026
CVE-2026-116259: A security flaw has been discovered in libimobiledevice up to 1.4.05.3 Medium1.9 LowN/AOct 26, 2026
CVE-2026-116258: A vulnerability was identified in libimobiledevice up to 1.4.06.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116257: A vulnerability was determined in BillaBear up to 2025.01.037.3 High5.5 MediumN/AOct 26, 2026
CVE-2026-116256: Server-Side Request Forgery (SSRF)7.3 High5.5 MediumN/AOct 26, 2026
CVE-2026-115961: Cross-site Scripting (XSS)6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115960: Missing Authorization4.3 MediumN/AN/AOct 26, 2026
CVE-2026-115959: Missing Authorization5.3 MediumN/AN/AOct 26, 2026
CVE-2026-115956: Cross-site Scripting (XSS)6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115955: Cross-site Scripting (XSS)6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115954: Missing Authorization5.4 MediumN/AN/AOct 26, 2026
CVE-2026-115953: Cross-site Scripting (XSS)6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115951: Cross-site Scripting (XSS)6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115950: Cross-site Scripting (XSS)6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115948: SQL Injection8.5 HighN/AN/AOct 26, 2026
CVE-2026-115608: SQL Injection8.5 HighN/AN/AOct 26, 2026
CVE-2026-115595: Missing Authorization5.3 MediumN/AN/AOct 26, 2026
CVE-2026-115594: Insertion of Sensitive Information Into Sent Data6.5 MediumN/AN/AOct 26, 2026
CVE-2026-114708: Cross-site Scripting (XSS)6.5 MediumN/AN/AOct 26, 2026
CVE-2026-114707: Cross-site Scripting (XSS)6.5 MediumN/AN/AOct 26, 2026
CVE-2026-94380: HAVELSAN Inc. Liman MYS: Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc8.1 HighN/AN/AOct 26, 2026
CVE-2026-116260: n/a libimobiledevice: A weakness has been identified in libimobiledevice up to 1.4.07.3 High6.9 MediumN/AOct 26, 2026
CVE-2026-97295: Cross-Site Request Forgery (CSRF)4.3 MediumN/AN/AOct 26, 2026
CVE-2026-97255: Authorization Bypass Through User-Controlled Key5.3 MediumN/AN/AOct 26, 2026
1-25 of 546512
›