The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-62090: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-62087: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-62086: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-62082: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-62077: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-62076: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-62075: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-62074: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-62070: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-62069: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-62068: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-62067: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-62066: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-62065: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-62064: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-62054: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-62053: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-62052: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-62051: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-62050: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-62043: Insertion of Sensitive Information Into Sent Data7.5 HighN/A0%Oct 10, 2026
CVE-2026-62038: Authentication Bypass Using an Alternate Path or Channel7.3 HighN/A0%Oct 10, 2026
CVE-2026-62037: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-62035: Missing Authorization6.3 MediumN/A0%Oct 10, 2026
CVE-2026-62034: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
5826-5850 of 406803
‹›