The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-63225: Improper Limitation of a Pathname to a Restricted Directory4.4 MediumN/A0%Sep 16, 2026
CVE-2026-63126: Integer Overflow or Wraparound7.5 HighN/A1%Sep 16, 2026
CVE-2026-59823: Server-Side Request Forgery (SSRF)N/A5.3 Medium0%Sep 16, 2026
CVE-2026-46352: Deadlock7.5 HighN/A0%Sep 16, 2026
CVE-2026-38999: NULL Pointer Dereference7.5 HighN/A1%Sep 16, 2026
CVE-2026-92720: Missing Authentication for Critical Function9.1 Critical9.3 Critical1%Sep 16, 2026
CVE-2026-92719: Server-Side Request Forgery (SSRF)7.5 High8.7 High0%Sep 16, 2026
CVE-2026-92718: Improper Verification of Cryptographic Signature7.3 High7.0 High0%Sep 16, 2026
CVE-2026-92716: Authorization Bypass Through User-Controlled Key9.6 Critical8.6 High0%Sep 16, 2026
CVE-2026-92605: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Sep 16, 2026
CVE-2026-92416: Reachable Assertion4.3 Medium5.3 Medium1%Sep 16, 2026
CVE-2026-92413: NULL Pointer Dereference4.3 Medium2.1 Low1%Sep 16, 2026
CVE-2026-92406: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Sep 16, 2026
CVE-2026-88593: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 16, 2026
CVE-2026-85387: Insufficient Session Expiration7.1 High2.0 Low0%Sep 16, 2026
CVE-2026-84397: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Sep 16, 2026
CVE-2026-69147: Uncontrolled Resource Consumption6.5 MediumN/A1%Sep 16, 2026
CVE-2026-51990: Improper Control of Generation of Code9.8 CriticalN/A0%Sep 16, 2026
CVE-2026-47094: Authorization Bypass Through User-Controlled Key8.8 High8.7 High1%Sep 16, 2026
CVE-2026-18120: Missing Authorization5.9 Medium6.3 Medium0%Sep 16, 2026
CVE-2026-92717: Missing Authentication for Critical Function9.1 Critical9.3 Critical0%Sep 16, 2026
CVE-2026-92604: Improper Limitation of a Pathname to a Restricted Directory8.1 High7.2 High1%Sep 16, 2026
CVE-2026-92603: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Sep 16, 2026
CVE-2026-92602: Server-Side Request Forgery (SSRF)7.1 High7.1 High0%Sep 16, 2026
CVE-2026-92405: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Sep 16, 2026
5326-5350 of 614180
‹›