The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-14448: Improper Neutralization of Special Elements used in an OS Command7.2 High8.6 High1%Jul 20, 2026
CVE-2026-63762: NULL Pointer DereferenceN/A6.0 Medium0%Jul 20, 2026
CVE-2026-63755: Incorrect Authorization6.5 Medium7.1 High0%Jul 20, 2026
CVE-2026-63752: Improper Authorization4.3 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-63751: Incorrect Authorization4.3 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-2445: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 20, 2026
CVE-2026-16242: Missing Authentication for Critical Function9.4 CriticalN/A1%Jul 20, 2026
CVE-2026-13577: Generation of Predictable Numbers or Identifiers8.2 HighN/A1%Jul 20, 2026
CVE-2026-9833: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 20, 2026
CVE-2026-8825: Exposure of Sensitive Information to an Unauthorized Actor4.9 MediumN/A0%Jul 20, 2026
CVE-2026-6656: Observable Timing Discrepancy7.5 HighN/A0%Jul 20, 2026
CVE-2026-16235: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-13432: Missing Authorization5.4 MediumN/A0%Jul 20, 2026
CVE-2026-13156: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Jul 20, 2026
CVE-2026-13147: Undefined Security Weakness9.1 CriticalN/A1%Jul 20, 2026
CVE-2026-13142: Improper Privilege Management8.1 HighN/A0%Jul 20, 2026
CVE-2026-12973: Missing Authorization6.5 MediumN/A0%Jul 20, 2026
CVE-2026-12972: Improper Access Control5.3 MediumN/A0%Jul 20, 2026
CVE-2026-12970: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 20, 2026
CVE-2026-12898: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Jul 20, 2026
CVE-2026-12724: Insufficient Verification of Data Authenticity4.3 MediumN/A0%Jul 20, 2026
CVE-2026-12723: Missing Authorization5.3 MediumN/A0%Jul 20, 2026
CVE-2026-12592: Improper Neutralization of Input During Web Page Generation7.5 HighN/A0%Jul 20, 2026
CVE-2026-11868: Missing Authorization5.3 MediumN/A0%Jul 20, 2026
CVE-2026-11349: Improper Neutralization of Special Elements used in an SQL Command8.6 HighN/A0%Jul 20, 2026
39826-39850 of 417606
‹›