The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-6784: Improper Neutralization of Special Elements used in a Command8.8 HighN/A0%Jul 11, 2026
CVE-2025-5017: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Jul 11, 2026
CVE-2026-7655: Weak Password Recovery Mechanism for Forgotten Password8.1 HighN/A0%Jul 11, 2026
CVE-2026-13378: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Jul 11, 2026
CVE-2026-9738: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Jul 11, 2026
CVE-2026-7620: Missing Authorization4.3 MediumN/A0%Jul 11, 2026
CVE-2026-7559: Missing Authorization4.3 MediumN/A0%Jul 11, 2026
CVE-2026-6804: Missing Authorization5.3 MediumN/A0%Jul 11, 2026
CVE-2026-6803: Missing Authorization5.3 MediumN/A0%Jul 11, 2026
CVE-2026-3576: Improper Input Validation7.2 HighN/A0%Jul 11, 2026
CVE-2026-3552: Missing Authorization4.3 MediumN/A0%Jul 11, 2026
CVE-2026-2354: Unrestricted Upload of File with Dangerous Type8.8 HighN/A1%Jul 11, 2026
CVE-2026-1832: Missing Authorization4.3 MediumN/A0%Jul 11, 2026
CVE-2026-15335: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Jul 11, 2026
CVE-2026-15097: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 11, 2026
CVE-2026-15096: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 11, 2026
CVE-2026-14262: Improper Privilege Management8.8 HighN/A0%Jul 11, 2026
CVE-2026-13250: Missing Authorization5.3 MediumN/A0%Jul 11, 2026
CVE-2026-13116: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Jul 11, 2026
CVE-2026-12141: Improper Neutralization of Input During Web Page Generation4.9 MediumN/A0%Jul 11, 2026
CVE-2025-13968: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 11, 2026
CVE-2026-8678: Missing Authorization4.3 MediumN/A0%Jul 11, 2026
CVE-2026-7544: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Jul 11, 2026
CVE-2026-5743: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 11, 2026
CVE-2026-3367: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Jul 11, 2026
48376-48400 of 416054
‹›