The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-17442: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Sep 4, 2026
CVE-2026-17440: Uncontrolled Recursion5.5 MediumN/A0%Sep 4, 2026
CVE-2026-17274: Use of Insufficiently Random Values5.4 MediumN/A0%Sep 4, 2026
CVE-2026-17273: NULL Pointer Dereference6.5 MediumN/A0%Sep 4, 2026
CVE-2026-17270: Stack-based Buffer Overflow5.5 MediumN/A0%Sep 4, 2026
CVE-2026-17259: Stack-based Buffer Overflow6.5 MediumN/A0%Sep 4, 2026
CVE-2026-17255: Out-of-bounds Write7.5 HighN/A0%Sep 4, 2026
CVE-2026-17207: Out-of-bounds Write9.1 CriticalN/A0%Sep 4, 2026
CVE-2026-17057: Missing Authentication for Critical Function9.1 CriticalN/A0%Sep 4, 2026
CVE-2026-16941: Incorrect Authorization4.3 MediumN/A0%Sep 4, 2026
CVE-2026-16892: Improper Authentication5.4 MediumN/A0%Sep 4, 2026
CVE-2026-16826: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A0%Sep 4, 2026
CVE-2026-16693: Use of a Broken or Risky Cryptographic Algorithm4.9 MediumN/A0%Sep 4, 2026
CVE-2026-16689: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Sep 4, 2026
CVE-2026-16660: Out-of-bounds Read5.3 MediumN/A0%Sep 4, 2026
CVE-2026-16180: Improper Restriction of Recursive Entity References in DTDs5.7 MediumN/A0%Sep 4, 2026
CVE-2026-14470: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Sep 4, 2026
CVE-2026-14350: Improper Output Neutralization for Logs5.3 MediumN/A0%Sep 4, 2026
CVE-2026-13297: Improper Neutralization of Special Elements Used in a Template Engine7.5 HighN/A0%Sep 4, 2026
CVE-2026-78658: Improper Removal of Sensitive Information Before Storage or Transfer6.5 MediumN/A0%Sep 4, 2026
CVE-2026-78543: Loop with Unreachable Exit Condition7.5 HighN/A1%Sep 4, 2026
CVE-2026-77822: Server-Side Request Forgery (SSRF)9.6 CriticalN/A0%Sep 4, 2026
CVE-2026-5522: Use of Hard-coded Credentials6.7 MediumN/A0%Sep 4, 2026
CVE-2026-19649: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Sep 4, 2026
CVE-2026-19645: Uncontrolled Resource Consumption6.5 MediumN/A0%Sep 4, 2026
651-675 of 9771
‹›