The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-33141: Exposure of Sensitive System Information to an Unauthorized Control Sphere6.5 MediumN/A0%Sep 18, 2026
CVE-2025-15399: Cross-Site Request Forgery (CSRF)10.0 CriticalN/A0%Sep 18, 2026
CVE-2025-14754: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 18, 2026
CVE-2025-14753: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Sep 18, 2026
CVE-2026-10841: Inconsistent Interpretation of HTTP Requests4.8 MediumN/A0%Sep 18, 2026
CVE-2025-1350: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Sep 18, 2026
CVE-2025-13882: Improper Control of Interaction Frequency5.3 MediumN/A0%Sep 18, 2026
CVE-2024-56344: Use of a Broken or Risky Cryptographic Algorithm5.9 MediumN/A0%Sep 18, 2026
CVE-2026-93394: Incorrect Implementation of Authentication Algorithm3.7 Low6.3 Medium0%Sep 17, 2026
CVE-2026-54587: Improper Link Resolution Before File AccessN/A5.8 Medium0%Sep 17, 2026
CVE-2026-54586: Cleartext Transmission of Sensitive InformationN/A6.0 Medium0%Sep 17, 2026
CVE-2026-54585: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.0 Medium1%Sep 17, 2026
CVE-2026-54583: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.3 High1%Sep 17, 2026
CVE-2026-54582: External Control of File Name or PathN/A6.0 Medium1%Sep 17, 2026
CVE-2026-54581: Insufficient Verification of Data AuthenticityN/A8.3 High0%Sep 17, 2026
CVE-2026-54580: Improper Validation of Integrity Check ValueN/A8.3 High0%Sep 17, 2026
CVE-2026-54579: Out-of-bounds ReadN/A2.3 Low0%Sep 17, 2026
CVE-2026-54578: Improper Validation of Integrity Check ValueN/A2.0 Low0%Sep 17, 2026
CVE-2026-54576: Improper Link Resolution Before File AccessN/A5.8 Medium0%Sep 17, 2026
CVE-2026-54575: Improper Neutralization of Special Elements used in an OS CommandN/A5.8 Medium0%Sep 17, 2026
CVE-2026-12752: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Sep 15, 2026
CVE-2026-12751: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Sep 15, 2026
CVE-2026-12750: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 15, 2026
CVE-2026-12749: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 15, 2026
CVE-2026-12742: Missing Authorization5.4 MediumN/A0%Sep 15, 2026
476-500 of 9773
‹›