The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-16198: Authentication Bypass Using an Alternate Path or Channel5.6 Medium2.9 Low1%Jul 19, 2026
CVE-2026-16197: Missing Authorization6.3 Medium2.1 Low0%Jul 18, 2026
CVE-2026-16196: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Jul 18, 2026
CVE-2026-16195: Incorrect Authorization6.3 Medium2.1 Low0%Jul 18, 2026
CVE-2026-10130: Incorrect Authorization8.2 High8.8 High1%Jul 18, 2026
CVE-2026-16194: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Jul 18, 2026
CVE-2026-16156: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Jul 18, 2026
CVE-2026-57857: Improper Neutralization of Input During Web Page Generation4.3 Medium5.1 Medium0%Jul 18, 2026
CVE-2026-16155: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Jul 18, 2026
CVE-2026-16154: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Jul 18, 2026
CVE-2026-16152: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Jul 18, 2026
CVE-2026-12228: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 18, 2026
CVE-2026-57848: Improper Export of Android Application Components5.5 Medium6.8 Medium0%Jul 18, 2026
CVE-2026-53994: Heap-based Buffer Overflow6.5 Medium7.7 High0%Jul 18, 2026
CVE-2026-16151: Improperly Controlled Modification of Object Prototype Attributes6.3 Medium5.3 Medium0%Jul 18, 2026
CVE-2026-16150: Improperly Controlled Modification of Object Prototype Attributes6.3 Medium5.3 Medium0%Jul 18, 2026
CVE-2026-16133: Improper Neutralization of Special Elements used in a Command5.0 Medium1.3 Low1%Jul 18, 2026
CVE-2026-16131: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jul 18, 2026
CVE-2026-16130: Improper Link Resolution Before File Access4.4 Medium1.9 Low0%Jul 18, 2026
CVE-2026-16129: Incomplete List of Disallowed Inputs5.3 Medium1.9 Low0%Jul 18, 2026
CVE-2026-16128: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Jul 18, 2026
CVE-2026-16127: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Jul 18, 2026
CVE-2026-16126: Incorrect Authorization7.3 High5.5 Medium1%Jul 18, 2026
CVE-2026-16125: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Jul 18, 2026
CVE-2026-16124: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Jul 18, 2026
41051-41075 of 660569
‹›