The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-78383: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Sep 23, 2026
CVE-2026-77791: Uncontrolled Resource Consumption7.5 HighN/A1%Sep 23, 2026
CVE-2026-77762: Concurrent Execution using Shared Resource with Improper Synchronization8.1 HighN/A0%Sep 23, 2026
CVE-2026-77756: Inconsistent Interpretation of HTTP Requests3.7 LowN/A0%Sep 23, 2026
CVE-2026-76183: Authentication Bypass by Alternate Name9.8 CriticalN/A0%Sep 23, 2026
CVE-2026-75973: Improper Authentication7.3 HighN/A0%Sep 23, 2026
CVE-2026-73581: Improper Check for Certificate Revocation6.5 MediumN/A0%Sep 23, 2026
CVE-2026-96443: Inclusion of Functionality from Untrusted Control Sphere6.5 MediumN/A0%Sep 23, 2026
CVE-2026-94251: Protection Mechanism Failure6.5 MediumN/A0%Sep 23, 2026
CVE-2026-94243: Origin Validation Error7.3 HighN/A0%Sep 23, 2026
CVE-2026-92001: Improper Restriction of Recursive Entity References in DTDs6.1 MediumN/A0%Sep 23, 2026
CVE-2026-91999: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 23, 2026
CVE-2026-91928: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 23, 2026
CVE-2026-91852: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 23, 2026
CVE-2026-73192: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 23, 2026
CVE-2026-31377: Improper Authentication7.5 HighN/A1%Sep 23, 2026
CVE-2026-82331: Improper Link Resolution Before File Access9.8 CriticalN/A0%Sep 23, 2026
CVE-2026-89282: Incorrect Permission Assignment for Critical Resource9.1 CriticalN/A0%Sep 22, 2026
CVE-2026-89281: Incorrect Permission Assignment for Critical Resource8.4 HighN/A0%Sep 22, 2026
CVE-2026-70410: Use of Externally-Controlled Input to Select Classes or Code8.8 HighN/A1%Sep 22, 2026
CVE-2026-73511: Authentication Bypass by Alternate Name5.3 MediumN/A0%Sep 21, 2026
CVE-2026-94449: Uncontrolled Resource Consumption7.5 HighN/A1%Sep 21, 2026
CVE-2026-94301: Deserialization of Untrusted Data9.8 CriticalN/A0%Sep 21, 2026
CVE-2026-86473: Insufficient Session Expiration9.1 CriticalN/A1%Sep 21, 2026
CVE-2026-82355: Session Fixation4.2 MediumN/A1%Sep 21, 2026
376-400 of 4429
‹›