The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-17467: Use of a Broken or Risky Cryptographic Algorithm8.2 HighN/A0%Sep 14, 2026
CVE-2026-17463: Uncontrolled Resource Consumption6.5 MediumN/A0%Sep 14, 2026
CVE-2026-17416: Deserialization of Untrusted Data7.8 HighN/A0%Sep 14, 2026
CVE-2026-17156: Deserialization of Untrusted Data7.8 HighN/A0%Sep 14, 2026
CVE-2026-17133: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A0%Sep 14, 2026
CVE-2026-17047: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Sep 14, 2026
CVE-2026-16702: NULL Pointer Dereference6.5 MediumN/A0%Sep 14, 2026
CVE-2026-16673: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Sep 14, 2026
CVE-2026-16466: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 14, 2026
CVE-2026-16435: Trusting HTTP Permission Methods on the Server Side5.9 MediumN/A0%Sep 14, 2026
CVE-2026-16432: Improper Restriction of XML External Entity Reference6.5 MediumN/A0%Sep 14, 2026
CVE-2026-16428: Improper Control of Generation of Code8.8 HighN/A1%Sep 14, 2026
CVE-2026-16338: External Control of File Name or Path8.8 HighN/A0%Sep 14, 2026
CVE-2026-16335: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A0%Sep 14, 2026
CVE-2026-16190: Missing Authorization3.1 LowN/A0%Sep 14, 2026
CVE-2026-16189: Improper Output Neutralization for Logs4.8 MediumN/A0%Sep 14, 2026
CVE-2026-16188: Improper Output Neutralization for Logs5.3 MediumN/A0%Sep 14, 2026
CVE-2026-16187: Missing Authorization6.5 MediumN/A0%Sep 14, 2026
CVE-2026-16186: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 14, 2026
CVE-2026-16185: Missing Authorization6.4 MediumN/A0%Sep 14, 2026
CVE-2026-15955: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Sep 14, 2026
CVE-2026-15887: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Sep 14, 2026
CVE-2026-15634: Inconsistent Interpretation of HTTP Requests6.5 MediumN/A0%Sep 14, 2026
CVE-2026-15412: URL Redirection to Untrusted Site6.5 MediumN/A0%Sep 14, 2026
CVE-2026-15396: Inconsistent Interpretation of HTTP Requests6.5 MediumN/A0%Sep 14, 2026
551-575 of 9771
‹›