The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-27886: Improper Limitation of a Pathname to a Restricted Directory7.5 High9.2 Critical3%May 14, 2026
CVE-2026-23998: Improper Certificate Validation7.5 High8.2 High0%May 14, 2026
CVE-2026-22707: Unrestricted Upload of File with Dangerous Type5.4 Medium5.3 Medium0%May 14, 2026
CVE-2026-22599: Improper Neutralization of Special Elements used in an SQL Command7.2 High9.3 Critical1%May 14, 2026
CVE-2026-20182: Improper Authentication10.0 CriticalN/A92%May 14, 2026
CVE-2026-21730: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%May 14, 2026
CVE-2026-5790: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%May 14, 2026
CVE-2026-4031: Missing Authorization7.5 HighN/A1%May 14, 2026
CVE-2026-6510: Missing Authorization9.8 CriticalN/A1%May 14, 2026
CVE-2026-6506: Missing Authorization8.8 HighN/A1%May 14, 2026
CVE-2026-5193: Improper Privilege Management6.5 MediumN/A0%May 14, 2026
CVE-2026-3718: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%May 14, 2026
CVE-2026-8181: Improper Authentication9.8 CriticalN/A3%May 14, 2026
CVE-2026-45714: Improper Control of Generation of Code9.1 CriticalN/A1%May 13, 2026
CVE-2026-45229: Improperly Controlled Modification of Dynamically-Determined Object Attributes8.8 High8.7 High1%May 13, 2026
CVE-2026-45054: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%May 13, 2026
CVE-2026-44380: Incorrect Authorization7.2 High8.6 High1%May 13, 2026
CVE-2026-44377: Improper Control of Generation of Code9.1 CriticalN/A1%May 13, 2026
CVE-2026-39428: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%May 13, 2026
CVE-2025-27852: Improper Neutralization of Input During Web Page Generation5.0 MediumN/A0%May 13, 2026
CVE-2025-27851: Cross-Site Request Forgery (CSRF)9.3 CriticalN/A0%May 13, 2026
CVE-2026-0261: Improper Neutralization of Special Elements used in an OS Command7.2 High6.1 Medium1%May 13, 2026
CVE-2026-0256: Improper Neutralization of Input During Web Page Generation4.8 Medium4.4 Medium0%May 13, 2026
CVE-2026-0251: Untrusted Search Path7.8 High5.9 Medium0%May 13, 2026
CVE-2026-0249: Improper Certificate Validation6.5 Medium4.9 Medium0%May 13, 2026
3301-3325 of 17506
‹›