The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-9171: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 17, 2026
CVE-2026-9135: Improper Control of Generation of Code9.9 CriticalN/A1%Jul 17, 2026
CVE-2026-9103: Missing Authentication for Critical Function9.8 CriticalN/A3%Jul 17, 2026
CVE-2026-58195: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Jul 17, 2026
CVE-2026-53712: Not Failing SecurelyN/A8.2 High0%Jul 17, 2026
CVE-2026-52746: Inefficient Regular Expression Complexity7.5 HighN/A1%Jul 17, 2026
CVE-2026-50185: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior3.3 Low2.0 Low0%Jul 17, 2026
CVE-2026-49835: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Jul 17, 2026
CVE-2026-48487: Improper Handling of Length Parameter Inconsistency5.3 Medium5.3 Medium0%Jul 17, 2026
CVE-2026-48045: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Jul 17, 2026
CVE-2026-47184: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Jul 17, 2026
CVE-2026-47183: Uncontrolled Resource Consumption6.5 MediumN/A0%Jul 17, 2026
CVE-2026-47180: Uncontrolled Recursion6.5 MediumN/A0%Jul 17, 2026
CVE-2026-45703: Missing Authorization6.4 MediumN/A0%Jul 17, 2026
CVE-2026-45309: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.2 High1%Jul 17, 2026
CVE-2026-45162: Deserialization of Untrusted Data8.0 HighN/A1%Jul 17, 2026
CVE-2026-16073: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Jul 17, 2026
CVE-2026-9762: Improper Control of Generation of Code7.8 HighN/A0%Jul 17, 2026
CVE-2026-9202: Missing Authentication for Critical Function9.8 CriticalN/A1%Jul 17, 2026
CVE-2026-9198: Improper Control of Generation of Code9.8 CriticalN/A29%Jul 17, 2026
CVE-2026-50273: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Jul 17, 2026
CVE-2026-48016: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Jul 17, 2026
CVE-2026-48015: Improper Neutralization of Input During Web Page Generation4.9 MediumN/A0%Jul 17, 2026
CVE-2026-48014: Missing Authorization6.5 MediumN/A0%Jul 17, 2026
CVE-2026-48010: Improper Privilege Management6.5 MediumN/A0%Jul 17, 2026
40401-40425 of 657253
‹›