The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-103877: Deserialization of Untrusted Data9.8 CriticalN/A1%Oct 2, 2026
CVE-2026-103552: Stack-based Buffer Overflow7.3 HighN/A0%Oct 2, 2026
CVE-2026-102731: Memory Allocation with Excessive Size Value7.5 HighN/A0%Oct 2, 2026
CVE-2026-93546: Integer Overflow or Wraparound8.8 HighN/A0%Oct 1, 2026
CVE-2026-79768: Path Equivalence: '/./' (Single Dot Directory)5.3 MediumN/A1%Oct 1, 2026
CVE-2026-73637: Use After Free7.3 HighN/A0%Oct 1, 2026
CVE-2026-73636: Authentication Bypass by Capture-replay8.1 HighN/A0%Oct 1, 2026
CVE-2026-63718: Inconsistent Interpretation of HTTP Requests7.5 HighN/A0%Oct 1, 2026
CVE-2026-63686: NULL Pointer Dereference7.5 HighN/A0%Oct 1, 2026
CVE-2026-63292: Stack-based Buffer Overflow7.5 HighN/A1%Oct 1, 2026
CVE-2026-63045: Improper Access Control7.5 HighN/A0%Oct 1, 2026
CVE-2026-59797: Improper Privilege Management9.8 CriticalN/A1%Oct 1, 2026
CVE-2026-59685: Out-of-bounds Write7.5 HighN/A0%Oct 1, 2026
CVE-2026-58415: Files or Directories Accessible to External Parties5.3 MediumN/A1%Oct 1, 2026
CVE-2026-57941: Use After Free9.8 CriticalN/A1%Oct 1, 2026
CVE-2026-56449: Out-of-bounds Write7.5 HighN/A1%Oct 1, 2026
CVE-2026-56154: Use After Free9.8 CriticalN/A1%Oct 1, 2026
CVE-2026-56153: Out-of-bounds Write7.5 HighN/A0%Oct 1, 2026
CVE-2026-48005: Missing Authentication for Critical Function7.5 HighN/A1%Oct 1, 2026
CVE-2026-47360: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 1, 2026
CVE-2026-46729: NULL Pointer Dereference7.5 HighN/A0%Oct 1, 2026
CVE-2026-42528: Memory Allocation with Excessive Size Value4.3 MediumN/A0%Oct 1, 2026
CVE-2026-42356: Deployment of Wrong Handler3.7 LowN/A0%Oct 1, 2026
CVE-2026-94276: Improper AuthenticationN/A5.1 Medium0%Oct 1, 2026
CVE-2026-94269: Use of Non-Canonical URL Paths for Authorization DecisionsN/A6.3 Medium0%Oct 1, 2026
226-250 of 4390
‹›