The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-68763: Uncontrolled Resource Consumption7.5 HighN/A1%Aug 25, 2026
CVE-2026-68569: Improper Authentication8.1 HighN/A0%Aug 25, 2026
CVE-2026-68525: Incorrect Authorization9.1 CriticalN/A0%Aug 25, 2026
CVE-2026-66422: Improper Authorization8.1 HighN/A0%Aug 25, 2026
CVE-2026-65927: Off-by-one Error7.5 HighN/A1%Aug 25, 2026
CVE-2026-65905: Authentication Bypass by Capture-replay9.8 CriticalN/A1%Aug 25, 2026
CVE-2026-65637: Improper Input Validation9.8 CriticalN/A1%Aug 25, 2026
CVE-2026-65183: Time-of-check Time-of-use (TOCTOU) Race Condition8.1 HighN/A0%Aug 25, 2026
CVE-2026-65182: Improper Access Control9.1 CriticalN/A1%Aug 25, 2026
CVE-2026-55976: Server-Side Request Forgery (SSRF)9.1 CriticalN/A1%Aug 25, 2026
CVE-2026-53561: Improper Authentication7.4 HighN/A0%Aug 25, 2026
CVE-2026-49845: Improper Control of Generation of Code9.8 CriticalN/A1%Aug 25, 2026
CVE-2026-49050: Incorrect Authorization8.8 HighN/A1%Aug 25, 2026
CVE-2026-56096: Improper Neutralization of Special Elements in Data Query LogicN/A6.3 Medium0%Aug 25, 2026
CVE-2026-56095: Deserialization of Untrusted DataN/A7.7 High0%Aug 25, 2026
CVE-2026-56094: Improper Neutralization of Special Elements in Data Query LogicN/A6.3 Medium0%Aug 25, 2026
CVE-2026-56093: Authorization Bypass Through User-Controlled KeyN/A6.3 Medium0%Aug 25, 2026
CVE-2026-56092: Missing AuthorizationN/A7.6 High0%Aug 25, 2026
CVE-2026-78329: Improper Input Validation9.8 CriticalN/A1%Aug 24, 2026
CVE-2026-75099: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A1%Aug 24, 2026
CVE-2026-71300: Improper Input Validation9.8 CriticalN/A1%Aug 24, 2026
CVE-2026-66908: Improper Authentication7.5 HighN/A1%Aug 24, 2026
CVE-2026-66907: Relative Path Traversal7.5 HighN/A1%Aug 24, 2026
CVE-2026-66906: Relative Path Traversal9.1 CriticalN/A1%Aug 24, 2026
CVE-2026-63621: Improper Input Validation5.3 MediumN/A1%Aug 24, 2026
601-625 of 4460
‹›