The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-62299: NULL Pointer Dereference5.3 MediumN/A1%Jul 16, 2026
CVE-2026-62290: Incorrect Authorization7.3 HighN/A0%Jul 16, 2026
CVE-2026-61718: Improper Authorization5.4 MediumN/A0%Jul 16, 2026
CVE-2026-61389: Out-of-bounds Write7.0 High7.3 High0%Jul 16, 2026
CVE-2026-60140: Out-of-bounds Read6.1 Medium6.9 Medium0%Jul 16, 2026
CVE-2026-60063: Out-of-bounds Write7.0 High7.3 High0%Jul 16, 2026
CVE-2026-55629: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.7 High1%Jul 16, 2026
CVE-2026-54728: Improper Input ValidationN/A6.1 Medium0%Jul 16, 2026
CVE-2026-49998: Improper Verification of Cryptographic Signature8.2 HighN/A0%Jul 16, 2026
CVE-2026-44982: Protection Mechanism Failure7.2 HighN/A0%Jul 16, 2026
CVE-2026-44981: Improper Handling of Highly Compressed Data (Data Amplification)N/A8.2 High1%Jul 16, 2026
CVE-2026-15449: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A5.8 Medium0%Jul 16, 2026
CVE-2026-15422: Heap-based Buffer OverflowN/A9.1 Critical1%Jul 16, 2026
CVE-2026-15352: NULL Pointer Dereference7.5 High8.2 High1%Jul 16, 2026
CVE-2026-54526: Improper Access Control9.9 Critical8.9 High1%Jul 16, 2026
CVE-2026-53536: Insufficient Verification of Data AuthenticityN/A5.3 Medium0%Jul 16, 2026
CVE-2026-53535: Improper Limitation of a Pathname to a Restricted DirectoryN/A5.9 Medium1%Jul 16, 2026
CVE-2026-47089: Missing Authorization4.3 MediumN/A0%Jul 16, 2026
CVE-2026-47088: Buffer Over-read3.1 LowN/A0%Jul 16, 2026
CVE-2026-47087: Operation on a Resource after Expiration or Release3.5 LowN/A0%Jul 16, 2026
CVE-2026-47086: Incorrect Authorization3.5 LowN/A0%Jul 16, 2026
CVE-2026-47085: Generation of Predictable Numbers or Identifiers4.0 MediumN/A0%Jul 16, 2026
CVE-2026-47084: Incorrect Authorization6.5 MediumN/A0%Jul 16, 2026
CVE-2026-47083: Observable Response Discrepancy4.3 MediumN/A0%Jul 16, 2026
CVE-2026-47082: Incorrect Authorization5.4 MediumN/A0%Jul 16, 2026
41726-41750 of 558706
‹›