The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-13473: Heap-based Buffer Overflow9.8 CriticalN/A1%Jul 17, 2026
CVE-2026-13448: Incomplete List of Disallowed Inputs9.8 CriticalN/A1%Jul 17, 2026
CVE-2026-12283: Improper Neutralization of Special Elements used in an SQL Command6.8 Medium6.1 Medium1%Jul 17, 2026
CVE-2025-51678: Improper Restriction of Operations within the Bounds of a Memory Buffer7.5 HighN/A1%Jul 17, 2026
CVE-2025-51677: Improper Encoding or Escaping of Output9.1 CriticalN/A1%Jul 17, 2026
CVE-2026-9171: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 17, 2026
CVE-2026-9135: Improper Control of Generation of Code9.9 CriticalN/A1%Jul 17, 2026
CVE-2026-9103: Missing Authentication for Critical Function9.8 CriticalN/A3%Jul 17, 2026
CVE-2026-58195: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Jul 17, 2026
CVE-2026-53712: Not Failing SecurelyN/A8.2 High0%Jul 17, 2026
CVE-2026-52746: Inefficient Regular Expression Complexity7.5 HighN/A1%Jul 17, 2026
CVE-2026-50185: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior3.3 Low2.0 Low0%Jul 17, 2026
CVE-2026-49835: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Jul 17, 2026
CVE-2026-48487: Improper Handling of Length Parameter Inconsistency5.3 Medium5.3 Medium0%Jul 17, 2026
CVE-2026-48045: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Jul 17, 2026
CVE-2026-47184: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Jul 17, 2026
CVE-2026-47183: Uncontrolled Resource Consumption6.5 MediumN/A0%Jul 17, 2026
CVE-2026-47180: Uncontrolled Recursion6.5 MediumN/A0%Jul 17, 2026
CVE-2026-45703: Missing Authorization6.4 MediumN/A0%Jul 17, 2026
CVE-2026-45309: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.2 High1%Jul 17, 2026
CVE-2026-45162: Deserialization of Untrusted Data8.0 HighN/A1%Jul 17, 2026
CVE-2026-16073: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Jul 17, 2026
CVE-2026-9762: Improper Control of Generation of Code7.8 HighN/A0%Jul 17, 2026
CVE-2026-9202: Missing Authentication for Critical Function9.8 CriticalN/A1%Jul 17, 2026
CVE-2026-9198: Improper Control of Generation of Code9.8 CriticalN/A29%Jul 17, 2026
41451-41475 of 443854
‹›