The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-45709: Server-Side Request Forgery (SSRF)5.8 MediumN/A0%Jul 20, 2026
CVE-2026-35198: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A0%Jul 20, 2026
CVE-2026-32822: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 MediumN/A0%Jul 20, 2026
CVE-2026-32807: Improper Authorization7.5 HighN/A0%Jul 20, 2026
CVE-2026-28220: Deserialization of Untrusted Data9.1 CriticalN/A1%Jul 20, 2026
CVE-2026-27823: Improper AuthorizationN/A8.7 High1%Jul 20, 2026
CVE-2026-26199: Buffer Underwrite6.5 Medium5.9 Medium0%Jul 20, 2026
CVE-2026-26197: Out-of-bounds Read7.5 High5.9 Medium0%Jul 20, 2026
Ubuntu: USN-8036-1 (CVE-2026-26081): HAProxy vulnerability4.8 MediumN/A0%Jul 20, 2026
CVE-2026-26080: Unchecked Return Value3.7 LowN/A1%Jul 20, 2026
CVE-2026-25039: Path Traversal: '\\UNC\share\name\' (Windows UNC Share)8.8 HighN/A1%Jul 20, 2026
CVE-2026-21824: Incorrect Privilege Assignment8.8 HighN/A0%Jul 20, 2026
CVE-2026-13724: Client-Side Enforcement of Server-Side Security4.3 MediumN/A0%Jul 20, 2026
CVE-2026-63091: Integer Overflow or Wraparound6.5 Medium7.1 High1%Jul 20, 2026
CVE-2026-63090: Heap-based Buffer Overflow8.8 High8.7 High1%Jul 20, 2026
CVE-2026-63071: Improper Isolation or Compartmentalization9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-62418: Server-Side Request Forgery (SSRF)8.1 HighN/A0%Jul 20, 2026
CVE-2026-62183: Improper Privilege Management9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-59238: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium1%Jul 20, 2026
CVE-2026-57308: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-54910: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A0%Jul 20, 2026
CVE-2026-54685: Observable Timing Discrepancy5.3 MediumN/A0%Jul 20, 2026
CVE-2026-53421: Improper Isolation or Compartmentalization9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-53405: Improper Isolation or Compartmentalization9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-52349: Improper Limitation of a Pathname to a Restricted Directory7.8 HighN/A0%Jul 20, 2026
39751-39775 of 417606
‹›