The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-82094: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A0%Sep 24, 2026
CVE-2026-82093: Deserialization of Untrusted Data8.8 HighN/A0%Sep 24, 2026
CVE-2026-81552: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 24, 2026
CVE-2026-81549: Server-Side Request Forgery (SSRF)7.7 HighN/A0%Sep 24, 2026
CVE-2026-81548: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 24, 2026
CVE-2026-81547: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Sep 24, 2026
CVE-2026-81545: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 24, 2026
CVE-2026-81539: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Sep 24, 2026
CVE-2026-77874: Improper Neutralization of Special Elements used in an SQL Command8.6 HighN/A0%Sep 24, 2026
CVE-2026-77825: Improper Limitation of a Pathname to a Restricted Directory4.9 MediumN/A0%Sep 24, 2026
CVE-2026-6544: Files or Directories Accessible to External Parties6.2 MediumN/A0%Sep 24, 2026
CVE-2026-19492: Use of Uninitialized Variable3.2 LowN/A0%Sep 24, 2026
CVE-2026-18870: Out-of-bounds Read4.3 MediumN/A0%Sep 24, 2026
CVE-2026-18857: Out-of-bounds Read3.4 LowN/A0%Sep 24, 2026
CVE-2026-18104: Use of a Broken or Risky Cryptographic Algorithm3.3 LowN/A0%Sep 24, 2026
CVE-2026-17511: Improper Removal of Sensitive Information Before Storage or Transfer3.4 LowN/A0%Sep 24, 2026
CVE-2026-17504: Integer Underflow (Wrap or Wraparound)4.4 MediumN/A0%Sep 24, 2026
CVE-2026-17503: Improper Input Validation5.1 MediumN/A0%Sep 24, 2026
CVE-2026-17413: Improper Validation of Array Index5.1 MediumN/A0%Sep 24, 2026
CVE-2026-81537: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 23, 2026
CVE-2026-81536: Improper Restriction of XML External Entity Reference7.7 HighN/A0%Sep 23, 2026
CVE-2026-81208: Insufficiently Protected Credentials7.7 HighN/A0%Sep 23, 2026
CVE-2026-80423: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Sep 23, 2026
CVE-2026-80425: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 23, 2026
CVE-2026-80412: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 23, 2026
301-325 of 9773
‹›