The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-8421: Cross-Site Request Forgery (CSRF)8.8 High7.5 High0%May 21, 2026
CVE-2026-8417: Cross-Site Request Forgery (CSRF)8.8 High7.5 High0%May 21, 2026
CVE-2026-8350: Incorrect Authorization8.8 High7.5 High0%May 21, 2026
CVE-2026-8140: Cross-Site Request Forgery (CSRF)6.5 Medium7.5 High0%May 21, 2026
CVE-2026-8135: Deserialization of Untrusted Data7.2 High8.9 High1%May 21, 2026
CVE-2026-8134: Improper Control of Filename for Include/Require Statement in PHP Program7.2 High9.4 Critical1%May 21, 2026
CVE-2026-47102: Incorrect Authorization8.8 High8.7 High1%May 21, 2026
CVE-2026-34926: Relative Path Traversal6.7 MediumN/A1%May 21, 2026
CVE-2026-5118: Improper Privilege Management9.8 CriticalN/A1%May 21, 2026
CVE-2026-6279: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.8 CriticalN/A2%May 21, 2026
CVE-2026-1543: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%May 21, 2026
CVE-2026-39960: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 20, 2026
CVE-2026-2812: Improper Authentication5.3 MediumN/A0%May 20, 2026
CVE-2026-9144: Improper Neutralization of Input During Web Page Generation7.6 High8.4 High0%May 20, 2026
CVE-2026-9141: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%May 20, 2026
CVE-2026-9139: Use of Hard-coded Credentials9.8 Critical9.3 Critical1%May 20, 2026
CVE-2026-20199: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.2 HighN/A0%May 20, 2026
CVE-2026-25602: Insufficient Verification of Data Authenticity2.3 LowN/A0%May 20, 2026
CVE-2026-22314: Improper Control of Generation of Code7.9 HighN/A0%May 20, 2026
CVE-2026-0857: Use of Password Hash With Insufficient Computational Effort4.4 MediumN/A0%May 20, 2026
CVE-2026-9059: Improper Neutralization of Special Elements used in an SQL CommandN/A9.3 Critical0%May 20, 2026
CVE-2026-6405: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%May 20, 2026
CVE-2026-5200: Missing Authorization8.8 HighN/A0%May 20, 2026
CVE-2026-44392: Missing Authorization4.3 Medium5.3 Medium0%May 20, 2026
CVE-2026-9057: Undefined Security Weakness8.2 HighN/A0%May 20, 2026
3201-3225 of 17506
‹›