The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-0246: Missing Authorization7.8 High5.9 Medium0%May 13, 2026
CVE-2026-0242: Improper Neutralization of Special Elements used in an SQL CommandN/A6.1 Medium0%May 13, 2026
CVE-2026-0238: Improper Input Validation3.2 Low1.1 Low0%May 13, 2026
CVE-2026-42930: Path Traversal: '.../...//'8.7 High8.5 High1%May 13, 2026
CVE-2026-42924: Improper Neutralization of Special Elements used in an OS Command8.7 High8.5 High0%May 13, 2026
CVE-2026-42919: Stack-based Buffer Overflow6.7 Medium7.1 High0%May 13, 2026
CVE-2026-42063: Files or Directories Accessible to External Parties4.9 Medium6.9 Medium0%May 13, 2026
CVE-2026-41954: Exposure of Sensitive Information to an Unauthorized Actor4.9 Medium6.9 Medium0%May 13, 2026
CVE-2026-41953: Improper Neutralization of Special Elements used in a Command8.7 High8.5 High0%May 13, 2026
CVE-2026-41217: Incorrect Permission Assignment for Critical Resource7.9 High8.3 High0%May 13, 2026
CVE-2026-40698: Improper Neutralization of Special Elements used in a Command8.7 High8.5 High0%May 13, 2026
CVE-2026-40631: Files or Directories Accessible to External Parties8.7 High8.5 High0%May 13, 2026
CVE-2026-40061: Improper Neutralization of Special Elements used in a Command8.7 High8.5 High0%May 13, 2026
CVE-2026-32673: Execution with Unnecessary Privileges8.7 High8.5 High0%May 13, 2026
CVE-2026-24464: Path Traversal: '.../...//'6.8 Medium6.9 Medium1%May 13, 2026
CVE-2020-37226: Improper Neutralization of Special Elements used in an SQL Command7.1 High7.1 High0%May 13, 2026
CVE-2020-37224: Improper Neutralization of Special Elements used in an SQL Command7.1 High7.1 High0%May 13, 2026
CVE-2020-37220: Use of Hard-coded Credentials7.5 High8.7 High0%May 13, 2026
CVE-2020-37217: Cross-Site Request Forgery (CSRF)4.3 Medium5.1 Medium0%May 13, 2026
CVE-2026-42948: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%May 13, 2026
CVE-2026-25107: Use of Hard-coded Cryptographic Key6.5 Medium6.9 Medium0%May 13, 2026
CVE-2025-11159: Dependency on Vulnerable Third-Party Component7.2 HighN/A0%May 13, 2026
CVE-2026-7635: Deserialization of Untrusted Data8.1 HighN/A1%May 13, 2026
CVE-2025-9989: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%May 13, 2026
CVE-2026-42289: Improper Privilege Management8.8 HighN/A0%May 12, 2026
3326-3350 of 17506
‹›