The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-57848: Improper Export of Android Application Components5.5 Medium6.8 Medium0%Jul 18, 2026
CVE-2026-53994: Heap-based Buffer Overflow6.5 Medium7.7 High0%Jul 18, 2026
CVE-2026-16151: Improperly Controlled Modification of Object Prototype Attributes6.3 Medium5.3 Medium0%Jul 18, 2026
CVE-2026-16150: Improperly Controlled Modification of Object Prototype Attributes6.3 Medium5.3 Medium0%Jul 18, 2026
CVE-2026-16133: Improper Neutralization of Special Elements used in a Command5.0 Medium1.3 Low1%Jul 18, 2026
CVE-2026-16131: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jul 18, 2026
CVE-2026-16130: Improper Link Resolution Before File Access4.4 Medium1.9 Low0%Jul 18, 2026
CVE-2026-16129: Incomplete List of Disallowed Inputs5.3 Medium1.9 Low0%Jul 18, 2026
CVE-2026-16128: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Jul 18, 2026
CVE-2026-16127: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Jul 18, 2026
CVE-2026-16126: Incorrect Authorization7.3 High5.5 Medium1%Jul 18, 2026
CVE-2026-16125: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Jul 18, 2026
CVE-2026-16124: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Jul 18, 2026
CVE-2026-16123: Missing Authorization6.3 Medium2.1 Low0%Jul 18, 2026
CVE-2026-16122: Incorrect Authorization4.3 Medium1.9 Low0%Jul 18, 2026
CVE-2026-16121: Improper Authorization6.3 Medium2.1 Low0%Jul 18, 2026
CVE-2026-9323: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)8.1 High9.2 Critical1%Jul 18, 2026
CVE-2026-16120: Use of Incorrectly-Resolved Name or Reference6.3 Medium2.1 Low0%Jul 18, 2026
CVE-2026-16119: Incorrect Authorization6.3 Medium2.1 Low0%Jul 18, 2026
CVE-2026-16117: Improper Input Validation10.0 CriticalN/A0%Jul 18, 2026
CVE-2026-11826: Heap-based Buffer Overflow8.8 High8.7 High1%Jul 18, 2026
CVE-2025-71398: Server-Side Request Forgery (SSRF)7.6 High5.8 Medium0%Jul 18, 2026
CVE-2025-71394: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium2.3 Low0%Jul 18, 2026
CVE-2025-71390: Incorrect Authorization8.8 High5.8 Medium0%Jul 18, 2026
CVE-2024-58370: Uncontrolled Recursion6.5 Medium7.1 High0%Jul 18, 2026
40251-40275 of 657253
‹›