The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-62351: Out-of-bounds Read7.5 HighN/A0%Jul 15, 2026
CVE-2026-62350: Improper Control of Generation of Code7.2 HighN/A1%Jul 15, 2026
CVE-2026-62349: Stack-based Buffer Overflow8.3 HighN/A1%Jul 15, 2026
CVE-2026-62348: Missing Authorization5.4 MediumN/A0%Jul 15, 2026
CVE-2026-54443: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)N/A5.9 Medium0%Jul 15, 2026
CVE-2026-49988: Exposure of Sensitive Information to an Unauthorized Actor5.5 Medium6.8 Medium0%Jul 15, 2026
CVE-2026-49987: Improper Neutralization of Argument Delimiters in a Command8.8 High7.5 High1%Jul 15, 2026
CVE-2026-46485: External Control of System or Configuration Setting8.2 HighN/A0%Jul 15, 2026
CVE-2026-46421: Embedded Malicious CodeN/A9.3 Critical1%Jul 15, 2026
CVE-2026-26032: Improper Limitation of a Pathname to a Restricted Directory5.4 MediumN/A1%Jul 15, 2026
CVE-2026-15895: Improper Neutralization of Special Elements used in an OS Command7.8 High8.4 High1%Jul 15, 2026
CVE-2026-15746: Server-Side Request Forgery (SSRF)6.5 Medium6.9 Medium0%Jul 15, 2026
CVE-2026-12997: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Jul 15, 2026
CVE-2026-8055: Undefined Security WeaknessN/AN/AN/AJul 15, 2026
CVE-2026-62948: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A1%Jul 15, 2026
CVE-2026-62389: Undefined Security WeaknessN/A8.7 High0%Jul 15, 2026
CVE-2026-61643: Incorrect Authorization5.9 MediumN/A0%Jul 15, 2026
CVE-2026-58660: Authorization Bypass Through User-Controlled Key8.1 High7.2 High1%Jul 15, 2026
CVE-2026-58659: Use of Externally-Controlled Input to Select Classes or Code7.8 High8.4 High1%Jul 15, 2026
CVE-2026-58658: Missing Authentication for Critical Function8.2 High8.8 High1%Jul 15, 2026
CVE-2026-56687: Obsolete Feature in UI7.8 HighN/A0%Jul 15, 2026
CVE-2026-56087: Protection Mechanism Failure6.1 MediumN/A0%Jul 15, 2026
CVE-2026-53518: Concurrent Execution using Shared Resource with Improper Synchronization8.1 High7.6 High0%Jul 15, 2026
CVE-2026-53517: Concurrent Execution using Shared Resource with Improper Synchronization8.1 HighN/A0%Jul 15, 2026
CVE-2026-53516: Improper Authentication8.3 HighN/A0%Jul 15, 2026
40926-40950 of 657253
‹›