The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-82340: Improper Control of Generation of Code9.8 CriticalN/A1%Sep 18, 2026
CVE-2026-81937: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A1%Sep 18, 2026
CVE-2026-81933: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Sep 18, 2026
CVE-2026-81669: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A1%Sep 18, 2026
CVE-2026-81657: Deserialization of Untrusted Data9.8 CriticalN/A1%Sep 18, 2026
CVE-2026-81656: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Sep 18, 2026
CVE-2026-81626: Improper Neutralization of Special Elements used in an SQL Command8.6 HighN/A0%Sep 18, 2026
CVE-2026-81623: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Sep 18, 2026
CVE-2026-80442: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 18, 2026
CVE-2026-80441: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Sep 18, 2026
CVE-2026-75878: Improper Authentication9.1 CriticalN/A0%Sep 18, 2026
CVE-2026-18869: Server-Side Request Forgery (SSRF)6.4 MediumN/A0%Sep 18, 2026
CVE-2026-17619: Improper Neutralization of Special Elements used in an SQL Command8.6 HighN/A0%Sep 18, 2026
CVE-2026-17262: Improper Neutralization of Special Elements used in an OS Command5.4 MediumN/A0%Sep 18, 2026
CVE-2026-11727: Heap-based Buffer Overflow8.1 HighN/A1%Sep 18, 2026
CVE-2026-11726: Out-of-bounds Read8.1 HighN/A0%Sep 18, 2026
CVE-2026-11725: Integer Overflow or Wraparound8.8 HighN/A0%Sep 18, 2026
CVE-2026-11716: Heap-based Buffer Overflow7.5 HighN/A0%Sep 18, 2026
CVE-2026-11711: Deserialization of Untrusted Data6.5 MediumN/A0%Sep 18, 2026
CVE-2026-11710: Inconsistent Interpretation of HTTP Requests6.5 MediumN/A0%Sep 18, 2026
CVE-2026-11545: Missing Authorization3.7 LowN/A0%Sep 18, 2026
CVE-2026-11540: Incorrect Authorization5.3 MediumN/A0%Sep 18, 2026
CVE-2026-11539: Missing Authentication for Critical Function5.3 MediumN/A0%Sep 18, 2026
CVE-2026-11538: Improper Output Neutralization for Logs5.3 MediumN/A0%Sep 18, 2026
CVE-2026-11722: Inconsistent Interpretation of HTTP Requests4.8 MediumN/A0%Sep 18, 2026
426-450 of 9773
‹›