The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-33684: Missing Authorization5.3 MediumN/A0%Jul 15, 2026
CVE-2026-33445: Uncontrolled Resource Consumption5.9 Medium8.7 High0%Jul 15, 2026
CVE-2026-33444: Improper Restriction of Operations within the Bounds of a Memory Buffer3.7 Low6.9 Medium0%Jul 15, 2026
CVE-2026-56743: Incorrect Authorization5.4 MediumN/A0%Jul 15, 2026
CVE-2026-56742: Missing Authorization8.9 HighN/A0%Jul 15, 2026
CVE-2026-52870: Missing Authorization7.6 HighN/A0%Jul 15, 2026
CVE-2026-52869: Authorization Bypass Through User-Controlled Key7.1 HighN/A1%Jul 15, 2026
CVE-2026-50144: Improper Input Validation7.1 HighN/A0%Jul 15, 2026
CVE-2026-50124: Unrestricted Upload of File with Dangerous TypeN/A7.1 High1%Jul 15, 2026
CVE-2026-50030: Improper Neutralization of Special Elements used in an SQL CommandN/A7.1 High0%Jul 15, 2026
CVE-2026-49867: Improper Neutralization of Input During Web Page GenerationN/A6.3 Medium0%Jul 15, 2026
CVE-2026-49445: Incorrect Permission Assignment for Critical Resource8.8 HighN/A0%Jul 15, 2026
CVE-2026-46684: Improper Verification of Cryptographic SignatureN/A9.5 Critical0%Jul 15, 2026
CVE-2026-45738: Improper Neutralization of Input During Web Page Generation8.7 HighN/A1%Jul 15, 2026
CVE-2026-45737: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A1%Jul 15, 2026
CVE-2026-45535: Improper Neutralization of Special Elements used in an SQL CommandN/A8.7 High0%Jul 15, 2026
CVE-2026-45534: Improper Control of Generation of CodeN/A9.0 Critical1%Jul 15, 2026
CVE-2026-45533: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.3 High0%Jul 15, 2026
CVE-2026-45419: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.5 High0%Jul 15, 2026
CVE-2026-45417: Improper Neutralization of Special Elements used in an SQL CommandN/A8.7 High0%Jul 15, 2026
CVE-2026-45320: Improper Neutralization of Special Elements used in an SQL CommandN/A8.7 High0%Jul 15, 2026
CVE-2026-40958: Improper Input Validation3.7 Low2.3 Low0%Jul 15, 2026
CVE-2026-40957: Improper Restriction of Rendered UI Layers or Frames7.5 High6.1 Medium0%Jul 15, 2026
CVE-2026-40956: Exposure of Sensitive Information to an Unauthorized Actor3.7 Low2.1 Low0%Jul 15, 2026
CVE-2026-40955: Integer Underflow (Wrap or Wraparound)3.7 Low2.1 Low0%Jul 15, 2026
40876-40900 of 657253
‹›