The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-82434: Insufficiently Protected Credentials6.5 Medium10.0 Critical1%Sep 14, 2026
CVE-2026-82433: Insufficiently Protected Credentials6.5 MediumN/A0%Sep 14, 2026
CVE-2026-82432: Incorrect Authorization8.1 HighN/A0%Sep 14, 2026
CVE-2026-82431: Incorrect Authorization9.8 CriticalN/A0%Sep 14, 2026
CVE-2026-82430: Time-of-check Time-of-use (TOCTOU) Race Condition7.8 HighN/A0%Sep 14, 2026
CVE-2026-82429: Time-of-check Time-of-use (TOCTOU) Race Condition7.8 HighN/A0%Sep 14, 2026
CVE-2026-82428: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Sep 14, 2026
CVE-2026-82427: Improper Limitation of a Pathname to a Restricted Directory7.8 HighN/A0%Sep 14, 2026
CVE-2026-82426: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Sep 14, 2026
CVE-2026-84179: Insufficiently Protected Credentials6.5 MediumN/A0%Sep 14, 2026
CVE-2026-82441: Improper Input Validation9.1 CriticalN/A0%Sep 14, 2026
CVE-2026-82439: Allocation of Resources Without Limits or Throttling9.8 CriticalN/A0%Sep 14, 2026
CVE-2026-73370: Incorrect Authorization9.8 CriticalN/A1%Sep 14, 2026
CVE-2026-73236: Incorrect Authorization7.5 HighN/A0%Sep 14, 2026
CVE-2026-73195: Improper Encoding or Escaping of Output7.3 HighN/A0%Sep 14, 2026
CVE-2026-73191: URL Redirection to Untrusted Site6.1 MediumN/A0%Sep 14, 2026
CVE-2026-90937: Improper Neutralization of CRLF Sequences9.9 Critical9.4 Critical0%Sep 14, 2026
CVE-2026-78336: Insertion of Sensitive Information Into Sent Data7.5 HighN/A0%Sep 14, 2026
CVE-2026-78330: Incorrect Privilege Assignment9.8 CriticalN/A1%Sep 14, 2026
CVE-2026-78318: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 14, 2026
CVE-2026-77883: Exposure of Sensitive Information Through Data Queries4.9 MediumN/A0%Sep 14, 2026
CVE-2026-77181: Incorrect Authorization9.8 CriticalN/A1%Sep 14, 2026
CVE-2026-77147: Improper Control of Generation of Code6.5 MediumN/A0%Sep 14, 2026
CVE-2026-77051: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Sep 14, 2026
CVE-2026-75030: Missing Authorization9.8 CriticalN/A1%Sep 14, 2026
501-525 of 4460
‹›