The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-5917: Improper Neutralization of Special Elements used in an OS Command8.8 High8.6 High1%Aug 11, 2026
CVE-2026-73283: Always-Incorrect Control Flow Implementation2.5 LowN/A0%Aug 11, 2026
CVE-2026-73282: Use After Free4.8 MediumN/A0%Aug 11, 2026
CVE-2026-73281: Incorrect Resource Transfer Between Spheres3.5 LowN/A0%Aug 11, 2026
CVE-2026-73227: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A0%Aug 11, 2026
CVE-2026-73226: Improper Control of Dynamically-Managed Code Resources8.8 HighN/A1%Aug 11, 2026
CVE-2026-73225: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A0%Aug 11, 2026
CVE-2026-73224: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 11, 2026
CVE-2026-73223: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A0%Aug 11, 2026
CVE-2026-72913: Improper Neutralization of Special Elements used in a CommandN/A7.3 High0%Aug 10, 2026
CVE-2026-72903: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A0%Aug 10, 2026
CVE-2026-72902: Improper Neutralization of Special Elements used in an OS Command9.9 CriticalN/A1%Aug 10, 2026
CVE-2026-72882: Improper Neutralization of Special Elements used in an OS Command9.9 CriticalN/A1%Aug 10, 2026
CVE-2026-72877: Improper Neutralization of Special Elements used in an OS Command9.6 CriticalN/A1%Aug 10, 2026
CVE-2026-72876: Improper Neutralization of Special Elements used in an OS Command9.9 CriticalN/A1%Aug 10, 2026
CVE-2026-71965: Insufficient Verification of Data Authenticity8.8 High8.7 High0%Aug 10, 2026
CVE-2025-13293: Use of Hard-coded CredentialsN/A9.3 Critical1%Aug 10, 2026
CVE-2026-72740: Improper Neutralization of Special Elements used in an OS Command9.9 CriticalN/A1%Aug 10, 2026
CVE-2026-72736: Improper Neutralization of Special Elements used in a Command9.9 CriticalN/A1%Aug 10, 2026
CVE-2026-72735: Improper Neutralization of Special Elements used in a Command9.9 CriticalN/A1%Aug 10, 2026
CVE-2026-72734: Authorization Bypass Through User-Controlled Key8.4 HighN/A0%Aug 10, 2026
CVE-2026-15060: Improper Access Control4.7 MediumN/A0%Aug 10, 2026
CVE-2026-71991: Improper Neutralization of Special Elements used in an OS Command9.8 Critical9.3 Critical2%Aug 9, 2026
CVE-2026-71990: Improper Neutralization of Special Elements used in an OS Command9.8 Critical9.3 Critical2%Aug 9, 2026
CVE-2026-19108: Use After Free5.3 Medium1.9 Low0%Aug 6, 2026
276-300 of 2138
‹›