The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-38752: Uncontrolled Recursion2.9 LowN/A0%Jul 15, 2026
CVE-2026-36590: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 15, 2026
CVE-2026-30623: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A5%Jul 15, 2026
CVE-2026-30618: Improper Control of Generation of Code9.8 CriticalN/A1%Jul 15, 2026
CVE-2026-26719: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 15, 2026
CVE-2026-26718: Cross-Site Request Forgery (CSRF)9.1 CriticalN/A0%Jul 15, 2026
CVE-2026-15921: Improper Limitation of a Pathname to a Restricted Directory3.1 Low2.1 Low0%Jul 15, 2026
CVE-2025-65720: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A1%Jul 15, 2026
CVE-2026-62361: Improper Neutralization of Special Elements used in an SQL Command5.5 MediumN/A0%Jul 15, 2026
CVE-2026-62312: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Jul 15, 2026
CVE-2026-59950: Origin Validation Error8.1 High7.6 High0%Jul 15, 2026
CVE-2026-56679: Improperly Controlled Modification of Dynamically-Determined Object AttributesN/A8.7 High1%Jul 15, 2026
CVE-2026-56678: Improper Input Validation6.4 MediumN/A0%Jul 15, 2026
CVE-2026-55608: Exposure of Sensitive Information to an Unauthorized Actor5.4 MediumN/A0%Jul 15, 2026
CVE-2026-55410: Improper Neutralization of Special Elements used in an OS Command6.7 MediumN/A1%Jul 15, 2026
CVE-2026-55399: Uncontrolled Resource Consumption4.3 Medium5.1 Medium0%Jul 15, 2026
CVE-2026-55398: Improper Restriction of Operations within the Bounds of a Memory Buffer3.7 Low6.9 Medium0%Jul 15, 2026
CVE-2026-54052: Authorization Bypass Through User-Controlled Key9.9 CriticalN/A0%Jul 15, 2026
CVE-2026-52888: Incomplete List of Disallowed Inputs6.8 MediumN/A0%Jul 15, 2026
CVE-2026-52887: Improper Neutralization of Special Elements used in an SQL Command10.0 CriticalN/A1%Jul 15, 2026
CVE-2026-51380: Buffer Copy without Checking Size of Input9.8 CriticalN/A1%Jul 15, 2026
CVE-2026-49353: Authentication Bypass by Spoofing7.5 HighN/A0%Jul 15, 2026
CVE-2026-49352: Use of Hard-coded Credentials9.8 CriticalN/A1%Jul 15, 2026
CVE-2026-46339: Improper Neutralization of Special Elements used in an OS Command10.0 CriticalN/A3%Jul 15, 2026
CVE-2026-38753: Use After Free4.9 MediumN/A0%Jul 15, 2026
40851-40875 of 657253
‹›