The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-58149: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Jul 17, 2026
CVE-2026-58148: Improper Neutralization of Input During Web Page GenerationN/A8.7 High0%Jul 17, 2026
CVE-2026-15783: Missing AuthorizationN/A5.3 Medium0%Jul 17, 2026
CVE-2026-15343: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.6 High1%Jul 17, 2026
CVE-2026-15007: Allocation of Resources Without Limits or ThrottlingN/A5.7 Medium1%Jul 17, 2026
CVE-2026-14871: Incorrect AuthorizationN/A7.1 High0%Jul 17, 2026
CVE-2026-14741: Inefficient Regular Expression Complexity7.5 HighN/A1%Jul 17, 2026
CVE-2026-12715: Missing AuthorizationN/A8.5 High0%Jul 17, 2026
CVE-2026-63094: URL Redirection to Untrusted Site8.1 High7.6 High0%Jul 17, 2026
CVE-2026-63093: Untrusted Search Path8.8 High8.7 High1%Jul 17, 2026
CVE-2026-51083: Improper Access Control6.5 MediumN/A0%Jul 17, 2026
CVE-2026-51082: Concurrent Execution using Shared Resource with Improper Synchronization7.2 HighN/A0%Jul 17, 2026
CVE-2026-51081: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 17, 2026
CVE-2026-16089: External Control of Assumed-Immutable Web Parameter5.9 MediumN/A0%Jul 17, 2026
CVE-2026-16017: Missing Authorization6.3 Medium2.1 Low0%Jul 17, 2026
CVE-2026-12705: Missing Support for Integrity Check6.4 Medium5.9 Medium0%Jul 17, 2026
CVE-2026-9592: Use of GET Request Method With Sensitive Query StringsN/A7.5 High0%Jul 17, 2026
CVE-2026-7488: Insertion of Sensitive Information Into Sent Data7.5 HighN/A0%Jul 17, 2026
CVE-2026-51080: Improper Restriction of XML External Entity Reference9.8 CriticalN/A1%Jul 17, 2026
CVE-2026-16072: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.9 MediumN/A0%Jul 17, 2026
CVE-2026-16016: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Jul 17, 2026
CVE-2026-16015: Missing Authentication for Critical Function6.3 Medium2.1 Low1%Jul 17, 2026
CVE-2025-60357: Improper Neutralization of Special Elements in Data Query Logic8.1 HighN/A0%Jul 17, 2026
CVE-2024-42214: Incomplete Denylist to Cross-Site Scripting5.3 MediumN/A0%Jul 17, 2026
CVE-2024-23578: Permissive Cross-domain Policy with Untrusted Domains4.2 MediumN/A0%Jul 17, 2026
41526-41550 of 443854
‹›