The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-19306: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A0%Sep 4, 2026
CVE-2026-19305: Server-Side Request Forgery (SSRF)7.5 HighN/A0%Sep 4, 2026
CVE-2026-19304: Server-Side Request Forgery (SSRF)7.7 HighN/A0%Sep 4, 2026
CVE-2026-19303: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A0%Sep 4, 2026
CVE-2026-19302: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Sep 4, 2026
CVE-2026-19301: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Sep 4, 2026
CVE-2026-19300: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Sep 4, 2026
CVE-2026-19299: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Sep 4, 2026
CVE-2026-19298: Improper Control of Generation of Code8.8 HighN/A1%Sep 4, 2026
CVE-2026-19283: Incorrect Authorization7.7 HighN/A0%Sep 4, 2026
CVE-2026-19274: Improper Access Control9.6 CriticalN/A0%Sep 4, 2026
CVE-2026-18905: Server-Side Request Forgery (SSRF)7.7 HighN/A0%Sep 4, 2026
CVE-2026-18887: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Sep 4, 2026
CVE-2026-18858: Privilege Defined With Unsafe Actions5.5 MediumN/A0%Sep 4, 2026
CVE-2026-18658: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Sep 4, 2026
CVE-2026-18567: Time-of-check Time-of-use (TOCTOU) Race Condition4.7 MediumN/A0%Sep 4, 2026
CVE-2026-9186: Improper Access Control6.5 MediumN/A0%Sep 4, 2026
CVE-2026-9138: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Sep 4, 2026
CVE-2026-8447: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 4, 2026
CVE-2026-81859: Use of a Broken or Risky Cryptographic Algorithm6.2 MediumN/A0%Sep 4, 2026
CVE-2026-81832: Improper Restriction of XML External Entity Reference7.7 HighN/A0%Sep 4, 2026
CVE-2026-9745: Unverified Ownership6.5 MediumN/A0%Sep 3, 2026
CVE-2026-9744: Improper Validation of Certificate with Host Mismatch5.9 MediumN/A0%Sep 3, 2026
CVE-2026-9736: Improper Output Neutralization for Logs4.3 MediumN/A0%Sep 3, 2026
CVE-2026-9036: Improper Certificate Validation5.9 MediumN/A0%Sep 3, 2026
676-700 of 9771
‹›