The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-65770: Improper Neutralization of Argument Delimiters in a Command10.0 CriticalN/A1%Aug 20, 2026
CVE-2026-63044: Server-Side Request Forgery (SSRF)5.4 MediumN/A1%Aug 20, 2026
CVE-2026-63043: Relative Path Traversal7.5 HighN/A1%Aug 20, 2026
CVE-2026-63042: Files or Directories Accessible to External Parties8.1 HighN/A1%Aug 20, 2026
CVE-2026-63040: Files or Directories Accessible to External Parties8.1 HighN/A1%Aug 20, 2026
CVE-2026-63039: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Aug 20, 2026
CVE-2026-63038: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Aug 20, 2026
CVE-2026-63037: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Aug 20, 2026
CVE-2026-63016: Uncontrolled Resource Consumption5.3 MediumN/A1%Aug 20, 2026
CVE-2026-63015: Uncontrolled Resource Consumption4.3 MediumN/A1%Aug 20, 2026
CVE-2026-19611: Improper Handling of Alternate Encoding7.4 HighN/A1%Aug 20, 2026
CVE-2026-63408: Use of GET Request Method With Sensitive Query Strings7.5 HighN/A0%Aug 19, 2026
CVE-2026-62673: Improper Handling of Case SensitivityN/A8.2 High1%Aug 19, 2026
CVE-2026-18051: Improper Limitation of a Pathname to a Restricted Directory10.0 CriticalN/A1%Aug 19, 2026
CVE-2026-34884: Server-Side Request Forgery (SSRF)9.8 CriticalN/A1%Aug 18, 2026
CVE-2026-19349: Authentication Bypass by Primary Weakness9.8 CriticalN/A1%Aug 16, 2026
CVE-2026-19728: Missing Authorization7.5 HighN/A0%Aug 16, 2026
CVE-2026-73635: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Aug 15, 2026
CVE-2026-73634: Uncontrolled Resource Consumption7.5 HighN/A1%Aug 15, 2026
CVE-2026-73632: Unsynchronized Access to Shared Data in a Multithreaded Context4.3 MediumN/A0%Aug 15, 2026
CVE-2026-73631: Unsynchronized Access to Shared Data in a Multithreaded Context4.3 MediumN/A0%Aug 15, 2026
CVE-2026-19879: Incorrect Conversion between Numeric Types5.3 MediumN/A0%Aug 14, 2026
CVE-2026-73633: Uncontrolled Resource Consumption7.5 HighN/A1%Aug 14, 2026
CVE-2026-73649: Improper Control of Generation of Code9.8 CriticalN/A1%Aug 13, 2026
CVE-2026-18428: Protection Mechanism Failure8.8 High8.7 High1%Aug 13, 2026
651-675 of 4460
‹›