The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-62035: Missing Authorization6.3 MediumN/A0%Oct 10, 2026
CVE-2026-62034: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-62033: Missing Authorization7.6 HighN/A0%Oct 10, 2026
CVE-2026-62032: Improper Control of Filename for Include/Require Statement in PHP Program9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-62031: Improper Neutralization of Special Elements used in an SQL Command9.3 CriticalN/A0%Oct 10, 2026
CVE-2026-62030: Server-Side Request Forgery (SSRF)7.2 HighN/A0%Oct 10, 2026
CVE-2026-62027: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-62025: Unrestricted Upload of File with Dangerous Type9.0 CriticalN/A0%Oct 10, 2026
CVE-2026-62024: Unrestricted Upload of File with Dangerous Type9.9 CriticalN/A0%Oct 10, 2026
CVE-2026-62022: Incorrect Privilege Assignment9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-62021: Deserialization of Untrusted Data8.8 HighN/A0%Oct 10, 2026
CVE-2026-62020: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-57742: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-48194: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-48193: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-45440: Improper Neutralization of Special Elements used in an SQL Command7.6 HighN/A0%Oct 10, 2026
CVE-2026-42777: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-42724: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-42723: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-42722: Improper Neutralization of Special Elements used in an SQL Command7.6 HighN/A0%Oct 10, 2026
CVE-2026-42719: Deserialization of Untrusted Data9.8 CriticalN/A1%Oct 10, 2026
CVE-2026-42718: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-42717: Improper Neutralization of Special Elements used in an SQL Command7.6 HighN/A0%Oct 10, 2026
CVE-2026-42716: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-42715: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
5851-5875 of 406803
‹›