The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-59694: Improper Validation of Specified Quantity in InputN/A8.3 High1%Jul 17, 2026
CVE-2026-59252: Improper Validation of Specified Quantity in InputN/A8.2 High1%Jul 17, 2026
CVE-2026-16008: Improperly Controlled Modification of Object Prototype Attributes6.3 Medium2.1 Low0%Jul 17, 2026
CVE-2026-22104: Authorization Bypass Through User-Controlled KeyN/A7.1 High0%Jul 17, 2026
CVE-2026-62764: Improper Handling of Insufficient Privileges6.5 Medium5.7 Medium1%Jul 17, 2026
CVE-2026-9656: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Jul 17, 2026
CVE-2026-15380: Improper Privilege ManagementN/A5.1 Medium0%Jul 17, 2026
CVE-2026-15379: Improper Privilege ManagementN/A5.1 Medium0%Jul 17, 2026
CVE-2026-9810: Improper Privilege Management9.8 CriticalN/A0%Jul 17, 2026
CVE-2026-13402: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Jul 17, 2026
CVE-2026-12393: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Jul 17, 2026
CVE-2026-11966: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Jul 17, 2026
CVE-2026-11961: Improper Privilege Management8.1 HighN/A0%Jul 17, 2026
CVE-2026-11575: Missing Authorization7.5 HighN/A0%Jul 17, 2026
CVE-2026-10525: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 17, 2026
CVE-2019-25764: Exposed IOCTL with Insufficient Access ControlN/A7.3 High0%Jul 17, 2026
CVE-2026-15982: Improper Privilege Management9.8 CriticalN/A1%Jul 17, 2026
CVE-2026-15094: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Jul 17, 2026
CVE-2026-60060: Improper Handling of Length Parameter Inconsistency6.3 Medium5.1 Medium0%Jul 17, 2026
CVE-2026-58317: Unsigned to Signed Conversion Error6.3 Medium5.1 Medium0%Jul 17, 2026
CVE-2026-41993: Improper Access Control4.4 Medium6.7 Medium0%Jul 17, 2026
CVE-2026-21770: Uncontrolled Search Path Element6.5 MediumN/A0%Jul 17, 2026
CVE-2026-15759: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 17, 2026
CVE-2026-15457: Improper Limitation of a Pathname to a Restricted Directory4.9 MediumN/A1%Jul 17, 2026
CVE-2026-15349: Missing Authorization4.3 MediumN/A0%Jul 17, 2026
40501-40525 of 657253
‹›