The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2025-55645: Heap-based Buffer Overflow5.5 MediumN/A0%Jun 15, 2026
CVE-2026-42851: Improper Control of Generation of Code7.8 HighN/A0%Jun 12, 2026
CVE-2026-12059: Improper Validation of Specified Quantity in Input8.8 High8.7 High0%Jun 12, 2026
CVE-2026-45172: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High1%Jun 11, 2026
CVE-2026-48110: Improper Input Validation7.5 HighN/A0%Jun 10, 2026
CVE-2026-48108: Improper Input Validation5.3 MediumN/A0%Jun 10, 2026
CVE-2026-48107: Improper Input Validation6.5 MediumN/A0%Jun 10, 2026
CVE-2026-46705: Improper Authentication5.3 MediumN/A0%Jun 10, 2026
CVE-2026-46702: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Jun 10, 2026
CVE-2026-46673: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Jun 10, 2026
CVE-2026-48859: Observable Timing Discrepancy5.3 Medium6.3 Medium0%Jun 10, 2026
CVE-2026-48855: Exposure of Sensitive Information to an Unauthorized Actor6.5 Medium2.3 Low0%Jun 10, 2026
CVE-2026-45565: Improper Input Validation8.1 HighN/A0%Jun 10, 2026
CVE-2026-45552: Authorization Bypass Through User-Controlled Key9.9 CriticalN/A0%Jun 10, 2026
CVE-2026-45549: Missing Authorization8.5 HighN/A0%Jun 10, 2026
CVE-2026-52755: Improper Limitation of a Pathname to a Restricted Directory7.8 High8.4 High0%Jun 10, 2026
CVE-2026-11837: Improper Link Resolution Before File Access7.3 HighN/A0%Jun 10, 2026
CVE-2026-44716: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Jun 10, 2026
CVE-2026-49959: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High1%Jun 9, 2026
CVE-2026-49957: Improper Limitation of a Pathname to a Restricted Directory7.7 High6.3 Medium0%Jun 9, 2026
CVE-2026-45750: Improper Neutralization of Special Elements used in an OS Command9.0 CriticalN/A0%Jun 5, 2026
CVE-2026-45749: Use of Single-factor Authentication8.1 HighN/A0%Jun 5, 2026
CVE-2026-45748: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A2%Jun 5, 2026
CVE-2026-45746: Improper Access Control9.0 CriticalN/A0%Jun 5, 2026
CVE-2026-45745: Improper Certificate Validation8.0 HighN/A0%Jun 5, 2026
426-450 of 2130
‹›