The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-85313: Permissive Cross-domain Policy with Untrusted Domains4.3 MediumN/A0%Oct 19, 2026
CVE-2026-85312: Improper Input Validation4.8 MediumN/A0%Oct 19, 2026
CVE-2026-85301: Improper Authentication4.8 MediumN/A0%Oct 19, 2026
CVE-2026-85300: Incorrect Default Permissions5.5 MediumN/A0%Oct 19, 2026
CVE-2026-85296: Exposure of Data Element to Wrong Session6.5 MediumN/A0%Oct 19, 2026
CVE-2026-85260: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Oct 19, 2026
CVE-2026-85257: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Oct 19, 2026
CVE-2026-85254: Improper Handling of Case Sensitivity6.5 MediumN/A0%Oct 19, 2026
CVE-2026-85251: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 19, 2026
CVE-2026-85250: Improper Restriction of XML External Entity Reference7.5 HighN/A1%Oct 19, 2026
CVE-2026-85249: Improper Input Validation6.5 MediumN/A0%Oct 19, 2026
CVE-2026-85248: Concurrent Execution using Shared Resource with Improper Synchronization5.9 MediumN/A0%Oct 19, 2026
CVE-2026-85247: Improper Certificate Validation5.9 MediumN/A0%Oct 19, 2026
CVE-2026-85246: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Oct 19, 2026
CVE-2026-85245: Exposure of Data Element to Wrong Session5.9 MediumN/A0%Oct 19, 2026
CVE-2026-85243: Improper Validation of Integrity Check Value5.9 MediumN/A0%Oct 19, 2026
CVE-2026-84181: Improper Authentication5.9 MediumN/A0%Oct 19, 2026
CVE-2026-84180: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Oct 19, 2026
CVE-2026-84178: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%Oct 19, 2026
CVE-2026-84176: Permissive Cross-domain Policy with Untrusted Domains6.5 MediumN/A0%Oct 19, 2026
CVE-2026-83531: Improper Control of Generation of Code8.8 HighN/A1%Oct 19, 2026
CVE-2026-80344: Server-Side Request Forgery (SSRF)8.2 HighN/A0%Oct 19, 2026
CVE-2026-80343: Improper Handling of Case Sensitivity8.2 HighN/A0%Oct 19, 2026
CVE-2026-80312: Improper Authentication8.2 HighN/A1%Oct 19, 2026
CVE-2026-79986: Improper Limitation of a Pathname to a Restricted Directory7.4 HighN/A1%Oct 19, 2026
2501-2525 of 417319
‹›