The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-19543: Improper Input Validation6.2 MediumN/A0%Sep 14, 2026
CVE-2026-18515: Improper Limitation of a Pathname to a Restricted Directory4.3 MediumN/A0%Sep 14, 2026
CVE-2026-18151: Concurrent Execution using Shared Resource with Improper Synchronization4.2 MediumN/A0%Sep 14, 2026
CVE-2026-53708: Reliance on Reverse DNS Resolution for a Security-Critical Action6.6 MediumN/A0%Sep 14, 2026
CVE-2026-89460: Undefined Security WeaknessN/AN/A0%Sep 11, 2026
CVE-2026-87958: Improper Privilege Management8.1 HighN/A0%Sep 10, 2026
CVE-2026-86093: Stack-based Buffer Overflow7.5 HighN/A0%Sep 10, 2026
CVE-2026-86087: Improper Limitation of a Pathname to a Restricted Directory4.3 MediumN/A0%Sep 10, 2026
CVE-2026-84889: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Sep 10, 2026
CVE-2026-82107: Improper Authentication9.6 CriticalN/A0%Sep 10, 2026
CVE-2026-82100: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Sep 10, 2026
CVE-2026-82099: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Sep 10, 2026
CVE-2026-82098: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 10, 2026
CVE-2026-82097: Server-Side Request Forgery (SSRF)8.8 HighN/A0%Sep 10, 2026
CVE-2026-82095: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 10, 2026
CVE-2026-82092: Absolute Path Traversal6.5 MediumN/A1%Sep 10, 2026
CVE-2026-81941: Improper Access Control8.8 HighN/A1%Sep 10, 2026
CVE-2026-81940: Improper Control of Generation of Code8.8 HighN/A1%Sep 10, 2026
CVE-2026-81554: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Sep 10, 2026
CVE-2026-81551: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A0%Sep 10, 2026
CVE-2026-81550: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 10, 2026
CVE-2026-81540: Improper Limitation of a Pathname to a Restricted Directory8.5 HighN/A0%Sep 10, 2026
CVE-2026-81268: Insufficient Session Expiration8.1 HighN/A0%Sep 10, 2026
CVE-2026-81265: Server-Side Request Forgery (SSRF)7.5 HighN/A0%Sep 10, 2026
CVE-2026-81213: Server-Side Request Forgery (SSRF)8.6 HighN/A0%Sep 10, 2026
576-600 of 9771
‹›