Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-74935: Improper Privilege Management8.8 HighN/A0%Aug 18, 2026
CVE-2026-74934: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Aug 18, 2026
CVE-2026-74961: Observable DiscrepancyN/AN/A0%Aug 18, 2026
CVE-2026-74950: Improper Privilege ManagementN/AN/A0%Aug 18, 2026
CVE-2026-74983: Protection Mechanism FailureN/AN/A0%Aug 18, 2026
CVE-2026-14899: Off-by-one Error7.5 HighN/A0%Jul 22, 2026
CVE-2026-16412: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A1%Jul 21, 2026
CVE-2026-16411: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A1%Jul 21, 2026
CVE-2026-16410: Access of Resource Using Incompatible Type9.8 CriticalN/A0%Jul 21, 2026
CVE-2026-16409: Access of Uninitialized Pointer7.5 HighN/A0%Jul 21, 2026
CVE-2026-16408: Integer Overflow or Wraparound9.8 CriticalN/A0%Jul 21, 2026
CVE-2026-16407: Improper Access Control9.8 CriticalN/A0%Jul 21, 2026
CVE-2026-16406: Protection Mechanism Failure9.1 CriticalN/A0%Jul 21, 2026
CVE-2026-16405: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Jul 21, 2026
CVE-2026-16403: User Interface (UI) Misrepresentation of Critical Information6.5 MediumN/A0%Jul 21, 2026
CVE-2026-16402: Integer Overflow or Wraparound9.8 CriticalN/A0%Jul 21, 2026
CVE-2026-16401: Improper Privilege Management8.8 HighN/A0%Jul 21, 2026
CVE-2026-16400: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Jul 21, 2026
CVE-2026-16399: Origin Validation Error7.5 HighN/A0%Jul 21, 2026
CVE-2026-16398: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Jul 21, 2026
CVE-2026-16396: Improper Privilege Management8.8 HighN/A0%Jul 21, 2026
CVE-2026-16395: Integer Overflow or Wraparound9.8 CriticalN/A0%Jul 21, 2026
CVE-2026-16394: Protection Mechanism Failure9.1 CriticalN/A0%Jul 21, 2026
CVE-2026-16393: Improper Restriction of Operations within the Bounds of a Memory Buffer9.1 CriticalN/A0%Jul 21, 2026
CVE-2026-16392: Always-Incorrect Control Flow Implementation9.1 CriticalN/A0%Jul 21, 2026
601-625 of 2523