The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-12728: Deserialization of Untrusted Data8.8 HighN/A1%Sep 15, 2026
CVE-2026-12667: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Sep 15, 2026
CVE-2026-12666: Improper Restriction of XML External Entity Reference8.1 HighN/A0%Sep 15, 2026
CVE-2026-12358: Uncontrolled Recursion7.5 HighN/A0%Sep 15, 2026
CVE-2026-12355: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.1 HighN/A0%Sep 15, 2026
CVE-2026-12354: Improper Control of Dynamically-Managed Code Resources7.5 HighN/A0%Sep 15, 2026
CVE-2026-12351: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.8 CriticalN/A0%Sep 15, 2026
CVE-2026-12150: Stack-based Buffer Overflow7.0 HighN/A0%Sep 15, 2026
CVE-2026-12101: Authentication Bypass by Alternate Name8.1 HighN/A0%Sep 15, 2026
CVE-2026-11934: Improper Authorization7.2 HighN/A0%Sep 15, 2026
CVE-2026-11929: Use of a Broken or Risky Cryptographic Algorithm7.5 HighN/A0%Sep 15, 2026
CVE-2026-11928: Out-of-bounds Write9.8 CriticalN/A0%Sep 15, 2026
CVE-2026-11927: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.5 MediumN/A0%Sep 15, 2026
CVE-2026-11926: Uncontrolled Resource Consumption7.5 HighN/A0%Sep 15, 2026
CVE-2026-11921: Insufficiently Protected Credentials9.1 CriticalN/A0%Sep 15, 2026
CVE-2026-11918: Incomplete List of Disallowed Inputs5.4 MediumN/A0%Sep 15, 2026
CVE-2026-11864: Improper Neutralization of Data within XPath Expressions6.5 MediumN/A0%Sep 15, 2026
CVE-2026-11729: Deserialization of Untrusted Data8.5 HighN/A0%Sep 15, 2026
CVE-2026-11728: Out-of-bounds Write8.1 HighN/A0%Sep 15, 2026
CVE-2026-53710: Improper Control of Generation of Code10.0 CriticalN/A1%Sep 15, 2026
CVE-2026-13265: Improper Restriction of XML External Entity Reference6.8 MediumN/A0%Sep 14, 2026
CVE-2026-12944: Server-Side Request Forgery (SSRF)9.6 CriticalN/A0%Sep 14, 2026
CVE-2026-12759: Uncontrolled Resource Consumption6.5 MediumN/A0%Sep 14, 2026
CVE-2026-12758: Missing Authorization5.4 MediumN/A0%Sep 14, 2026
CVE-2026-12756: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Sep 14, 2026
501-525 of 9773
‹›