The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-49876: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Jul 13, 2026
CVE-2026-41041: Improper Handling of URL Encoding (Hex Encoding)9.1 CriticalN/A0%Jul 13, 2026
CVE-2026-22103: Improper Neutralization of Special Elements used in a CommandN/A9.3 Critical1%Jul 13, 2026
CVE-2026-22102: Improper Input ValidationN/A9.3 Critical0%Jul 13, 2026
CVE-2026-22100: Improper Neutralization of Special Elements used in an OS CommandN/A8.6 High1%Jul 13, 2026
CVE-2026-22099: Improper AuthenticationN/A8.7 High0%Jul 13, 2026
CVE-2026-22098: Insertion of Sensitive Information into Log FileN/A9.2 Critical0%Jul 13, 2026
CVE-2026-22097: Improper Verification of Cryptographic SignatureN/A9.3 Critical0%Jul 13, 2026
CVE-2026-22096: Missing Authentication for Critical FunctionN/A9.3 Critical0%Jul 13, 2026
CVE-2026-22095: Improper Neutralization of Special Elements used in a CommandN/A9.3 Critical1%Jul 13, 2026
CVE-2026-22093: Improper Certificate ValidationN/A9.5 Critical0%Jul 13, 2026
CVE-2026-15557: Improper Authentication7.3 High5.5 Medium1%Jul 13, 2026
CVE-2026-15548: Stack-based Buffer Overflow8.8 High7.4 High1%Jul 13, 2026
CVE-2026-14846: Improper Neutralization of Formula Elements in a CSV FileN/A4.5 Medium0%Jul 13, 2026
CVE-2026-13014: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.2 Critical1%Jul 13, 2026
CVE-2026-9708: Authorization Bypass Through User-Controlled Key4.9 MediumN/A0%Jul 13, 2026
CVE-2026-9597: Authentication Bypass by Primary Weakness5.4 MediumN/A0%Jul 13, 2026
CVE-2026-9571: Authentication Bypass by Primary Weakness6.5 MediumN/A0%Jul 13, 2026
CVE-2026-6850: Inefficient Regular Expression Complexity6.5 MediumN/A0%Jul 13, 2026
CVE-2026-62143: Server-Side Request Forgery (SSRF)N/A8.3 High0%Jul 13, 2026
CVE-2026-15574: Insertion of Sensitive Information into Externally-Accessible File or Directory7.5 HighN/A0%Jul 13, 2026
CVE-2026-15547: Improper Neutralization of Special Elements used in an OS Command6.3 Medium2.1 Low1%Jul 13, 2026
CVE-2026-15546: Improper Neutralization of Special Elements used in an OS Command6.3 Medium2.1 Low1%Jul 13, 2026
CVE-2026-15545: Out-of-bounds Write8.8 High7.4 High0%Jul 13, 2026
CVE-2026-14453: Improper Control of Generation of Code9.6 CriticalN/A0%Jul 13, 2026
48751-48775 of 545063
‹›