The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-15903: Out-of-bounds Read8.8 HighN/A0%Jul 20, 2026
CVE-2026-15902: Use After Free8.8 HighN/A0%Jul 20, 2026
CVE-2026-15901: Use After Free9.6 CriticalN/A0%Jul 20, 2026
CVE-2026-15900: Use After Free9.6 CriticalN/A0%Jul 20, 2026
CVE-2026-15899: Use After Free9.6 CriticalN/A0%Jul 20, 2026
CVE-2026-64626: Server-Side Request Forgery (SSRF)6.4 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-64625: Improper Neutralization of Special Elements used in an OS Command9.8 Critical9.3 Critical1%Jul 20, 2026
CVE-2026-64624: Improper Neutralization of Argument Delimiters in a Command7.8 High8.5 High0%Jul 20, 2026
CVE-2026-57852: Incorrect Implementation of Authentication Algorithm5.6 Medium6.3 Medium1%Jul 20, 2026
CVE-2026-57495: Missing Authentication for Critical FunctionN/A8.2 High0%Jul 20, 2026
CVE-2026-57494: Authorization Bypass Through User-Controlled KeyN/A7.1 High0%Jul 20, 2026
CVE-2026-55550: Improper Privilege Management7.1 HighN/A0%Jul 20, 2026
CVE-2026-55544: Improper Access Control7.6 HighN/A0%Jul 20, 2026
CVE-2026-52656: Improper Control of Generation of Code9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-51385: Improper Control of Generation of Code6.9 MediumN/A1%Jul 20, 2026
CVE-2026-51031: Server-Side Request Forgery (SSRF)7.5 HighN/A0%Jul 20, 2026
CVE-2026-51025: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 20, 2026
CVE-2026-47255: Improper Input Validation8.2 HighN/A0%Jul 20, 2026
CVE-2026-47144: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A0%Jul 20, 2026
CVE-2026-47134: Incorrect Permission Assignment for Critical ResourceN/A6.9 Medium0%Jul 20, 2026
CVE-2026-47133: Authentication Bypass by Capture-replayN/A6.9 Medium0%Jul 20, 2026
CVE-2026-47128: Incorrect Authorization6.1 MediumN/A0%Jul 20, 2026
CVE-2026-44510: Undefined Security WeaknessN/AN/A0%Jul 20, 2026
CVE-2026-16324: Unrestricted Upload of File with Dangerous Type7.3 High5.5 Medium0%Jul 20, 2026
CVE-2026-12900: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 20, 2026
39626-39650 of 541230
‹›