The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-66256: Deserialization of Untrusted Data7.2 HighN/A1%Aug 13, 2026
CVE-2026-73240: Improper Neutralization of Argument Delimiters in a Command9.8 CriticalN/A1%Aug 12, 2026
CVE-2026-73239: Improper Handling of Insufficient Permissions or Privileges6.5 MediumN/A1%Aug 12, 2026
CVE-2026-73238: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 MediumN/A1%Aug 12, 2026
CVE-2026-73237: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 MediumN/A1%Aug 12, 2026
CVE-2026-68971: Missing Authorization6.5 MediumN/A0%Aug 12, 2026
CVE-2026-68970: Cleartext Storage of Sensitive Information6.5 MediumN/A0%Aug 12, 2026
CVE-2026-68969: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Aug 12, 2026
CVE-2026-68968: Interpretation Conflict7.5 HighN/A0%Aug 12, 2026
CVE-2026-68076: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Aug 12, 2026
CVE-2026-67587: Deserialization of Untrusted Data8.8 HighN/A1%Aug 12, 2026
CVE-2026-67260: Deserialization of Untrusted Data7.3 HighN/A1%Aug 12, 2026
CVE-2026-65017: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Aug 12, 2026
CVE-2026-59244: Cleartext Storage of Sensitive Information6.5 MediumN/A0%Aug 12, 2026
CVE-2026-59242: Deserialization of Untrusted Data5.4 MediumN/A1%Aug 12, 2026
CVE-2026-58076: Deserialization of Untrusted Data8.8 HighN/A0%Aug 12, 2026
CVE-2026-54183: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Aug 12, 2026
CVE-2026-68868: Insufficient Granularity of Access Control6.5 MediumN/A1%Aug 12, 2026
CVE-2026-71290: Improper Certificate ValidationN/AN/A0%Aug 11, 2026
CVE-2026-13457: Unrestricted Upload of File with Dangerous Type7.5 HighN/A1%Aug 11, 2026
CVE-2026-69223: Server-Side Request Forgery (SSRF)9.1 CriticalN/A1%Aug 11, 2026
CVE-2026-14180: Inconsistent Interpretation of HTTP Requests5.3 MediumN/A1%Aug 11, 2026
CVE-2026-15565: Buffer Copy without Checking Size of Input7.5 HighN/A1%Aug 11, 2026
CVE-2026-68872: Authorization Bypass Through User-Controlled Key6.5 MediumN/A1%Aug 10, 2026
CVE-2026-68871: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Aug 10, 2026
676-700 of 4460
‹›