The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-48978: Server-Side Request Forgery (SSRF)N/A2.1 Low0%Jul 17, 2026
CVE-2026-48819: Improperly Controlled Modification of Object Prototype Attributes4.8 MediumN/A0%Jul 17, 2026
CVE-2026-48504: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Jul 17, 2026
CVE-2026-48373: Heap-based Buffer Overflow7.8 HighN/A0%Jul 17, 2026
CVE-2026-46420: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A2%Jul 17, 2026
CVE-2026-45799: Improper Validation of Array Index7.5 HighN/A1%Jul 17, 2026
CVE-2026-45704: Missing AuthorizationN/A7.1 High0%Jul 17, 2026
CVE-2026-45260: Missing Authorization8.1 HighN/A1%Jul 17, 2026
CVE-2026-44974: Interpretation ConflictN/A7.7 High0%Jul 17, 2026
CVE-2026-44739: Improper Neutralization of Special Elements used in an SQL Command8.7 HighN/A0%Jul 17, 2026
CVE-2026-43636: Undefined Security WeaknessN/AN/AN/AJul 17, 2026
CVE-2026-42168: Improper Neutralization of Special Elements used in an OS Command9.1 CriticalN/A2%Jul 17, 2026
CVE-2026-36669: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Jul 17, 2026
CVE-2026-16118: Heap-based Buffer Overflow7.1 HighN/A0%Jul 17, 2026
CVE-2026-15995: Concurrent Execution using Shared Resource with Improper Synchronization4.2 MediumN/A0%Jul 17, 2026
CVE-2026-15415: Relative Path Traversal5.5 Medium6.8 Medium0%Jul 17, 2026
CVE-2026-15322: Use of GET Request Method With Sensitive Query Strings7.5 HighN/A1%Jul 17, 2026
CVE-2026-15093: URL Redirection to Untrusted Site4.3 MediumN/A0%Jul 17, 2026
CVE-2026-15091: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Jul 17, 2026
CVE-2026-15069: Improper Neutralization of Special Elements used in an OS Command5.4 MediumN/A0%Jul 17, 2026
CVE-2026-14979: Improper Restriction of Recursive Entity References in DTDs7.5 HighN/A1%Jul 17, 2026
CVE-2026-14971: Undefined Security Weakness7.0 HighN/A0%Jul 17, 2026
CVE-2026-14501: Use of Potentially Dangerous Function9.8 CriticalN/A0%Jul 17, 2026
CVE-2026-14499: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Jul 17, 2026
CVE-2026-13473: Heap-based Buffer Overflow9.8 CriticalN/A1%Jul 17, 2026
40376-40400 of 657253
‹›