The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-60093: Relative Path Traversal5.5 MediumN/A0%Aug 24, 2026
CVE-2026-59230: Improper Input Validation6.5 MediumN/A1%Aug 24, 2026
CVE-2026-19565: Predictable from Observable State3.7 LowN/A0%Aug 23, 2026
CVE-2026-54789: Out-of-bounds Read7.5 HighN/A0%Aug 21, 2026
CVE-2026-59654: Missing Release of Resource after Effective Lifetime7.5 High6.8 Medium1%Aug 21, 2026
CVE-2026-68745: Improper Verification of Cryptographic Signature8.1 HighN/A0%Aug 21, 2026
CVE-2026-66797: Improper Access Control5.4 MediumN/A0%Aug 21, 2026
CVE-2026-66722: Improper Authorization7.2 HighN/A1%Aug 21, 2026
CVE-2026-66721: Missing Authorization2.7 LowN/A0%Aug 21, 2026
CVE-2026-65613: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Aug 21, 2026
CVE-2026-63046: Improper Neutralization of Argument Delimiters in a Command8.8 HighN/A1%Aug 21, 2026
CVE-2026-62440: Improper Access Control9.1 CriticalN/A1%Aug 21, 2026
CVE-2026-61422: Server-Side Request Forgery (SSRF)4.3 MediumN/A0%Aug 21, 2026
CVE-2026-61400: Improper Neutralization of Special Elements used in a Command8.8 HighN/A3%Aug 21, 2026
CVE-2026-61399: Improper Encoding or Escaping of Output4.8 MediumN/A1%Aug 21, 2026
CVE-2026-61398: Improper Encoding or Escaping of Output9.1 CriticalN/A1%Aug 21, 2026
CVE-2026-61397: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Aug 21, 2026
CVE-2026-59799: Improper Privilege Management8.8 HighN/A1%Aug 21, 2026
CVE-2026-59780: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Aug 21, 2026
CVE-2026-59657: Cleartext Storage of Sensitive Information7.5 HighN/A0%Aug 21, 2026
CVE-2026-59655: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Aug 21, 2026
CVE-2026-59085: Server-Side Request Forgery (SSRF)9.1 CriticalN/A1%Aug 21, 2026
CVE-2026-50222: Missing Authorization7.5 HighN/A1%Aug 21, 2026
CVE-2026-50112: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 21, 2026
CVE-2026-47359: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A2%Aug 21, 2026
626-650 of 4460
‹›