The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-84085: Improper Neutralization of Special Elements used in an OS Command8.1 HighN/A0%Sep 18, 2026
CVE-2026-84084: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Sep 18, 2026
CVE-2026-84083: Improper Privilege Management7.8 HighN/A0%Sep 18, 2026
CVE-2026-84082: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Sep 18, 2026
CVE-2026-84081: Improper Certificate Validation8.1 HighN/A0%Sep 18, 2026
CVE-2026-84078: Missing Authentication for Critical Function9.9 CriticalN/A0%Sep 18, 2026
CVE-2026-84077: Cross-Site Request Forgery (CSRF)8.1 HighN/A0%Sep 18, 2026
CVE-2026-84076: Improper Authorization7.6 HighN/A0%Sep 18, 2026
CVE-2026-84075: Missing Authentication for Critical Function9.9 CriticalN/A0%Sep 18, 2026
CVE-2026-84074: Improper Neutralization of Input During Web Page Generation8.9 HighN/A0%Sep 18, 2026
CVE-2026-84073: Improper Neutralization of Special Elements used in an SQL Command9.1 CriticalN/A0%Sep 18, 2026
CVE-2026-84071: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A1%Sep 18, 2026
CVE-2026-84070: Improper Neutralization of Input During Web Page Generation8.9 HighN/A0%Sep 18, 2026
CVE-2026-84064: Improper Neutralization of Special Elements used in an SQL Command9.9 CriticalN/A0%Sep 18, 2026
CVE-2026-84036: Improper Authorization7.4 HighN/A0%Sep 18, 2026
CVE-2026-84034: Use of Hard-coded Credentials8.8 HighN/A0%Sep 18, 2026
CVE-2026-84031: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A0%Sep 18, 2026
CVE-2026-82967: Missing Authentication for Critical Function9.8 CriticalN/A0%Sep 18, 2026
CVE-2026-82896: Improper Limitation of a Pathname to a Restricted Directory7.6 HighN/A0%Sep 18, 2026
CVE-2026-82893: Improper Privilege Management7.8 HighN/A0%Sep 18, 2026
CVE-2026-82892: Improper Neutralization of Special Elements used in an OS Command8.1 HighN/A0%Sep 18, 2026
CVE-2026-82890: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 18, 2026
CVE-2026-82887: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Sep 18, 2026
CVE-2026-82885: Missing Authorization8.8 HighN/A0%Sep 18, 2026
CVE-2026-82832: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A0%Sep 18, 2026
401-425 of 9773
‹›