The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-46338: Improper Limitation of a Pathname to a Restricted Directory4.3 MediumN/A0%Jul 16, 2026
CVE-2026-46687: Path Traversal: '../filedir'N/A7.7 High0%Jul 16, 2026
CVE-2026-46686: Improper Neutralization of Input During Web Page GenerationN/A8.5 High0%Jul 16, 2026
CVE-2026-46341: Improper Input Validation6.1 MediumN/A0%Jul 16, 2026
CVE-2026-46336: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A1%Jul 16, 2026
CVE-2026-45336: Use of Hard-coded Credentials10.0 CriticalN/A1%Jul 16, 2026
CVE-2026-44970: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Jul 16, 2026
CVE-2026-44969: Insertion of Sensitive Information into Log File3.3 LowN/A0%Jul 16, 2026
CVE-2026-44968: Improper Neutralization of Argument Delimiters in a Command6.3 MediumN/A0%Jul 16, 2026
CVE-2026-15945: Authorization Bypass Through User-Controlled Key2.7 LowN/A0%Jul 16, 2026
CVE-2026-15737: Insertion of Sensitive Information into Log File5.7 Medium5.7 Medium0%Jul 16, 2026
CVE-2021-27137: Stack-based Buffer Overflow8.1 HighN/A4%Jul 16, 2026
CVE-2026-9046: Insecure Inherited Permissions7.0 High7.3 High0%Jul 16, 2026
CVE-2026-6511: Missing Authentication for Critical Function5.5 Medium6.8 Medium0%Jul 16, 2026
CVE-2026-63088: Server-Side Request Forgery (SSRF)8.6 High7.7 High1%Jul 16, 2026
CVE-2026-63087: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Jul 16, 2026
CVE-2026-63086: Server-Side Request Forgery (SSRF)8.6 High6.9 Medium0%Jul 16, 2026
CVE-2026-63085: Incorrect Authorization8.8 High8.7 High1%Jul 16, 2026
CVE-2026-57074: Out-of-bounds Read9.1 CriticalN/A1%Jul 16, 2026
CVE-2026-57073: Out-of-bounds Read9.1 CriticalN/A1%Jul 16, 2026
CVE-2026-55548: Improper Access Control4.3 MediumN/A0%Jul 16, 2026
CVE-2026-55407: Uncontrolled Resource ConsumptionN/A6.3 Medium1%Jul 16, 2026
CVE-2026-55406: Exposure of Sensitive Information to an Unauthorized ActorN/A5.9 Medium0%Jul 16, 2026
CVE-2026-50012: Improper Input Validation5.5 MediumN/A3%Jul 16, 2026
CVE-2026-47751: Improper Neutralization of Special Elements used in an OS CommandN/A5.3 Medium1%Jul 16, 2026
40651-40675 of 657253
‹›