The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-18173: Improper Certificate Validation3.7 LowN/A0%Sep 22, 2026
CVE-2026-18172: Improper Restriction of XML External Entity Reference7.4 HighN/A0%Sep 22, 2026
CVE-2026-18170: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Sep 22, 2026
CVE-2026-18169: Improper Limitation of a Pathname to a Restricted Directory9.9 CriticalN/A1%Sep 22, 2026
CVE-2026-18163: Deserialization of Untrusted Data9.8 CriticalN/A1%Sep 22, 2026
CVE-2026-18162: Improper Control of Generation of Code9.8 CriticalN/A1%Sep 22, 2026
CVE-2026-18161: Insufficient Logging4.3 MediumN/A0%Sep 22, 2026
CVE-2026-18156: Missing Authorization6.5 MediumN/A0%Sep 22, 2026
CVE-2026-18154: Use of Hard-coded Cryptographic Key7.5 HighN/A0%Sep 22, 2026
CVE-2026-18153: Use of a Broken or Risky Cryptographic Algorithm7.1 HighN/A0%Sep 22, 2026
CVE-2026-18152: Improper Verification of Cryptographic Signature7.5 HighN/A0%Sep 22, 2026
CVE-2026-18137: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/A1%Sep 22, 2026
CVE-2026-18134: Cleartext Transmission of Sensitive Information7.5 HighN/A0%Sep 22, 2026
CVE-2026-18133: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Sep 22, 2026
CVE-2026-18132: Missing Authorization6.5 MediumN/A0%Sep 22, 2026
CVE-2026-18131: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 22, 2026
CVE-2026-18124: Insufficiently Protected Credentials6.5 MediumN/A0%Sep 22, 2026
CVE-2026-18123: Use of Externally-Controlled Input to Select Classes or Code7.5 HighN/A1%Sep 22, 2026
CVE-2026-18114: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Sep 22, 2026
CVE-2026-18095: Out-of-bounds Write8.8 HighN/A1%Sep 22, 2026
CVE-2026-18074: Improper Authentication7.5 HighN/A1%Sep 22, 2026
CVE-2026-18066: Server-Side Request Forgery (SSRF)7.1 HighN/A0%Sep 22, 2026
CVE-2026-17647: Inclusion of Functionality from Untrusted Control Sphere8.8 HighN/A0%Sep 22, 2026
CVE-2026-17646: Improper Restriction of XML External Entity Reference6.5 MediumN/A0%Sep 22, 2026
CVE-2026-17645: Improper Privilege Management8.8 HighN/A1%Sep 22, 2026
351-375 of 9773
‹›