The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-48194: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-48193: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-45440: Improper Neutralization of Special Elements used in an SQL Command7.6 HighN/A0%Oct 10, 2026
CVE-2026-42777: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-42724: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-42723: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-42722: Improper Neutralization of Special Elements used in an SQL Command7.6 HighN/A0%Oct 10, 2026
CVE-2026-42719: Deserialization of Untrusted Data9.8 CriticalN/A1%Oct 10, 2026
CVE-2026-42718: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-42717: Improper Neutralization of Special Elements used in an SQL Command7.6 HighN/A0%Oct 10, 2026
CVE-2026-42716: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-42715: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42712: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Oct 10, 2026
CVE-2026-42711: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42709: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42706: Missing Authorization7.5 HighN/A0%Oct 10, 2026
CVE-2026-42705: Missing Authorization7.5 HighN/A0%Oct 10, 2026
CVE-2026-42704: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-42702: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42699: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42697: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42696: Improper Control of Generation of Code10.0 CriticalN/A0%Oct 10, 2026
CVE-2026-42693: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42633: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Oct 10, 2026
CVE-2026-42632: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
5876-5900 of 406803
‹›