The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-7616: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%May 12, 2026
CVE-2026-7562: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%May 12, 2026
CVE-2026-7561: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%May 12, 2026
CVE-2026-7464: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 12, 2026
CVE-2026-7437: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 12, 2026
CVE-2026-6932: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%May 12, 2026
CVE-2026-6808: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 12, 2026
CVE-2026-6710: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%May 12, 2026
CVE-2026-2993: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A1%May 12, 2026
CVE-2026-7257: Insecure Storage of Sensitive Information4.4 MediumN/A0%May 12, 2026
CVE-2026-40135: Improper Neutralization of Special Elements used in a Command6.5 MediumN/A2%May 12, 2026
CVE-2026-34259: Improper Neutralization of Special Elements used in a Command8.2 HighN/A0%May 12, 2026
CVE-2026-45393: Incorrect Default Permissions7.8 High8.5 High0%May 12, 2026
CVE-2026-42887: Improper Neutralization of Input During Web Page Generation4.5 MediumN/A0%May 11, 2026
CVE-2026-3048: Deserialization of Untrusted Data3.8 Low5.1 Medium0%May 11, 2026
CVE-2026-36962: Improper Neutralization of Special Elements used in an SQL Command7.3 HighN/A0%May 11, 2026
CVE-2026-44738: Exposure of Sensitive Information to an Unauthorized Actor7.7 HighN/A0%May 11, 2026
CVE-2026-42843: Incorrect Authorization8.8 HighN/A0%May 11, 2026
CVE-2026-42842: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 11, 2026
CVE-2026-6815: Undefined Security Weakness5.9 MediumN/A1%May 11, 2026
CVE-2026-42610: Incorrect Authorization6.5 MediumN/A0%May 11, 2026
CVE-2026-42609: Improper Privilege Management8.1 HighN/A1%May 11, 2026
CVE-2026-42607: Improper Control of Generation of Code9.1 CriticalN/A2%May 11, 2026
CVE-2022-50961: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 10, 2026
CVE-2022-50956: Improper Limitation of a Pathname to a Restricted Directory6.2 Medium6.9 Medium0%May 10, 2026
3376-3400 of 17506
‹›