The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-7421: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Jun 3, 2026
CVE-2026-35482: Incorrect Authorization9.1 CriticalN/A0%Jun 2, 2026
CVE-2026-32625: Exposure of Sensitive Information to an Unauthorized Actor9.6 CriticalN/A0%Jun 2, 2026
CVE-2026-5076: Improper Authentication9.8 CriticalN/A0%Jun 2, 2026
CVE-2026-9522: Improper Access Control5.4 MediumN/A0%Jun 2, 2026
CVE-2026-9730: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jun 2, 2026
CVE-2026-9723: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jun 2, 2026
CVE-2026-9722: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jun 2, 2026
CVE-2026-9599: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jun 2, 2026
CVE-2026-8422: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jun 2, 2026
CVE-2026-4071: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jun 2, 2026
CVE-2026-3620: Improper Input Validation4.4 MediumN/A0%Jun 2, 2026
CVE-2026-2425: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 2, 2026
CVE-2026-2382: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jun 2, 2026
CVE-2025-5085: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Jun 2, 2026
CVE-2026-10100: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Jun 2, 2026
CVE-2026-49134: Insecure Temporary File7.1 High7.5 High0%Jun 1, 2026
CVE-2026-9614: Improper Access Control8.8 HighN/A1%Jun 1, 2026
CVE-2026-30963: Improper Input Validation2.7 LowN/A0%Jun 1, 2026
CVE-2026-22872: Improper Input Validation9.1 Critical6.9 Medium1%Jun 1, 2026
CVE-2026-25600: Use of Hard-coded Credentials6.4 MediumN/A0%Jun 1, 2026
CVE-2026-44825: Use of Hard-coded Credentials9.8 CriticalN/A3%Jun 1, 2026
CVE-2026-10178: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%May 31, 2026
CVE-2026-10171: Improper Neutralization of Special Elements used in an SQL Command4.7 Medium2.0 Low0%May 31, 2026
CVE-2026-7459: Weak Password Recovery Mechanism for Forgotten Password7.5 HighN/A1%May 30, 2026
3026-3050 of 17506
‹›