The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-55238: Buffer Over-read5.3 MediumN/A1%Jul 20, 2026
CVE-2026-54538: Loop with Unreachable Exit Condition7.5 HighN/A1%Jul 20, 2026
CVE-2026-54051: Improper Neutralization of Special Elements used in an OS Command9.9 CriticalN/A1%Jul 20, 2026
CVE-2026-50743: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Jul 20, 2026
CVE-2026-47276: NULL Pointer Dereference6.5 MediumN/A0%Jul 20, 2026
CVE-2026-47275: NULL Pointer Dereference2.6 LowN/A0%Jul 20, 2026
CVE-2026-46701: Origin Validation Error7.6 HighN/A0%Jul 20, 2026
CVE-2026-46555: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A0%Jul 20, 2026
CVE-2026-44978: Improper Input Validation5.3 MediumN/A1%Jul 20, 2026
CVE-2026-44178: Heap-based Buffer Overflow8.8 HighN/A1%Jul 20, 2026
CVE-2026-42218: Observable Response Discrepancy5.3 MediumN/A0%Jul 20, 2026
CVE-2026-42210: Improper AuthenticationN/A5.3 Medium1%Jul 20, 2026
CVE-2026-41521: Integer Overflow or Wraparound9.1 CriticalN/A1%Jul 20, 2026
CVE-2026-41252: Heap-based Buffer Overflow9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-40187: Improper Neutralization of Special Elements used in an OS CommandN/A8.6 High1%Jul 20, 2026
CVE-2026-39879: Improper Neutralization of Escape, Meta, or Control Sequences7.1 HighN/A0%Jul 20, 2026
CVE-2026-39385: Authentication Bypass Using an Alternate Path or ChannelN/A7.1 High0%Jul 20, 2026
CVE-2026-35591: Heap-based Buffer Overflow7.8 High7.0 High0%Jul 20, 2026
CVE-2026-35590: Heap-based Buffer Overflow5.5 Medium6.8 Medium0%Jul 20, 2026
CVE-2026-35217: Out-of-bounds Read6.5 MediumN/A0%Jul 20, 2026
CVE-2026-35048: Improper Input Validation9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-33328: Integer Overflow or Wraparound5.5 Medium6.8 Medium0%Jul 20, 2026
CVE-2026-33327: Integer Overflow or Wraparound7.8 High7.0 High0%Jul 20, 2026
CVE-2026-32825: Improper Restriction of Excessive Authentication Attempts7.3 HighN/A0%Jul 20, 2026
CVE-2026-32824: URL Redirection to Untrusted Site7.3 HighN/A0%Jul 20, 2026
39726-39750 of 417606
‹›