The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-15788: Improper Link Resolution Before File Access7.5 High5.6 Medium0%Jul 20, 2026
CVE-2026-64619: Use of Less Trusted Source7.5 High8.7 High0%Jul 20, 2026
CVE-2026-64194: Uncontrolled Recursion7.5 HighN/A1%Jul 20, 2026
CVE-2026-64193: Improper Neutralization of Directives in Dynamically Evaluated Code9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-63771: Improper Neutralization of CRLF Sequences in HTTP Headers7.1 High6.0 Medium0%Jul 20, 2026
CVE-2026-63770: Use of Less Trusted Source7.5 High8.2 High0%Jul 20, 2026
CVE-2026-63768: URL Redirection to Untrusted Site4.3 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-63731: Server-Side Request Forgery (SSRF)7.7 High6.3 Medium0%Jul 20, 2026
CVE-2026-63730: Server-Side Request Forgery (SSRF)5.0 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-63108: Incomplete List of Disallowed Inputs8.8 High7.7 High2%Jul 20, 2026
CVE-2026-63107: Server-Side Request Forgery (SSRF)7.7 High6.3 Medium0%Jul 20, 2026
CVE-2026-62414: Improper Access Control9.1 CriticalN/A0%Jul 20, 2026
CVE-2026-61901: URL Redirection to Untrusted Site6.1 MediumN/A0%Jul 20, 2026
CVE-2026-61900: Unrestricted Upload of File with Dangerous TypeN/A10.0 Critical0%Jul 20, 2026
CVE-2026-61425: Authentication Bypass Using an Alternate Path or ChannelN/A9.4 Critical1%Jul 20, 2026
CVE-2026-61424: Unrestricted Upload of File with Dangerous TypeN/A10.0 Critical0%Jul 20, 2026
CVE-2026-60034: Improper Neutralization of Input During Web Page GenerationN/A9.4 Critical0%Jul 20, 2026
CVE-2026-60033: Server-Side Request Forgery (SSRF)N/A5.1 Medium0%Jul 20, 2026
CVE-2026-60032: Unrestricted Upload of File with Dangerous TypeN/A9.4 Critical0%Jul 20, 2026
CVE-2026-60031: Exposure of Sensitive Information to an Unauthorized ActorN/A6.9 Medium0%Jul 20, 2026
CVE-2026-60030: Improper Access ControlN/A8.7 High0%Jul 20, 2026
CVE-2026-60029: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Jul 20, 2026
CVE-2026-60028: Improper Neutralization of Input During Web Page GenerationN/A8.6 High0%Jul 20, 2026
CVE-2026-60027: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.7 High1%Jul 20, 2026
CVE-2026-60026: Improper Control of Generation of CodeN/A8.9 High1%Jul 20, 2026
39676-39700 of 417606
‹›