The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-81211: Missing Authorization8.8 HighN/A0%Sep 10, 2026
CVE-2026-81210: Authorization Bypass Through User-Controlled Key7.7 HighN/A0%Sep 10, 2026
CVE-2026-81207: Server-Side Request Forgery (SSRF)8.5 HighN/A0%Sep 10, 2026
CVE-2026-81204: Improper Control of Generation of Code9.8 CriticalN/A1%Sep 10, 2026
CVE-2026-80436: Improper Authorization8.5 HighN/A0%Sep 10, 2026
CVE-2026-80434: Authorization Bypass Through User-Controlled Key5.0 MediumN/A0%Sep 10, 2026
CVE-2026-80424: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A0%Sep 10, 2026
CVE-2026-80380: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Sep 10, 2026
CVE-2026-80378: Improper Authorization6.5 MediumN/A0%Sep 10, 2026
CVE-2026-79742: Improper Control of Generation of Code8.8 HighN/A1%Sep 10, 2026
CVE-2026-79725: Improper Access Control6.5 MediumN/A0%Sep 10, 2026
CVE-2026-79724: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A0%Sep 10, 2026
CVE-2026-79723: Server-Side Request Forgery (SSRF)5.0 MediumN/A0%Sep 10, 2026
CVE-2026-78575: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 10, 2026
CVE-2026-78573: Use of Default Credentials9.8 CriticalN/A0%Sep 10, 2026
CVE-2026-78571: Improper Control of Generation of Code8.8 HighN/A1%Sep 10, 2026
CVE-2026-78569: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Sep 10, 2026
CVE-2026-76059: Protection Mechanism Failure8.8 HighN/A0%Sep 10, 2026
CVE-2026-75777: Improper Privilege Management8.8 HighN/A0%Sep 10, 2026
CVE-2026-75624: Incorrect Authorization8.8 HighN/A0%Sep 10, 2026
CVE-2026-2310: XML Injection (aka Blind XPath Injection)7.8 HighN/A0%Sep 10, 2026
CVE-2026-19646: Undefined Security Weakness9.1 CriticalN/A1%Sep 10, 2026
CVE-2026-9667: Server-Side Request Forgery (SSRF)5.3 MediumN/A0%Sep 10, 2026
CVE-2026-9327: Improper Privilege Management8.1 HighN/A0%Sep 10, 2026
CVE-2026-9225: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Sep 10, 2026
601-625 of 9771
‹›