The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-80379: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 23, 2026
CVE-2026-6935: Uncontrolled Search Path Element7.8 HighN/A0%Sep 23, 2026
CVE-2026-6928: Use After Free9.8 CriticalN/A0%Sep 23, 2026
CVE-2026-6925: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Sep 23, 2026
CVE-2026-6794: Double Free7.8 HighN/A0%Sep 23, 2026
CVE-2026-6730: Buffer Copy without Checking Size of Input7.8 HighN/A0%Sep 23, 2026
CVE-2026-6721: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Sep 23, 2026
CVE-2026-6718: Incorrect Default Permissions6.2 MediumN/A0%Sep 23, 2026
CVE-2026-6327: Improper Output Neutralization for Logs4.3 MediumN/A0%Sep 23, 2026
CVE-2026-4921: Generation of Error Message Containing Sensitive Information2.7 LowN/A0%Sep 23, 2026
CVE-2026-3626: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Sep 23, 2026
CVE-2026-19267: Missing Authentication for Critical Function6.2 MediumN/A0%Sep 23, 2026
CVE-2026-19179: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.2 HighN/A0%Sep 23, 2026
CVE-2026-19087: Execution with Unnecessary Privileges4.4 MediumN/A0%Sep 23, 2026
CVE-2026-18875: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.3 HighN/A0%Sep 23, 2026
CVE-2026-18872: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%Sep 23, 2026
CVE-2026-18505: URL Redirection to Untrusted Site5.4 MediumN/A0%Sep 23, 2026
CVE-2026-18490: Deserialization of Untrusted Data8.8 HighN/A0%Sep 23, 2026
CVE-2026-18185: Missing Authentication for Critical Function7.3 HighN/A0%Sep 23, 2026
CVE-2026-18184: Improper Restriction of XML External Entity Reference7.4 HighN/A0%Sep 23, 2026
CVE-2026-18181: Use of Hard-coded Cryptographic Key8.1 HighN/A0%Sep 23, 2026
CVE-2026-18180: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Sep 23, 2026
CVE-2026-18179: Missing Authorization6.5 MediumN/A0%Sep 23, 2026
CVE-2026-18177: Missing Authorization7.1 HighN/A0%Sep 23, 2026
CVE-2026-18176: Cleartext Transmission of Sensitive Information7.4 HighN/A0%Sep 22, 2026
326-350 of 9773
‹›