The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-68870: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Aug 10, 2026
CVE-2026-65948: Improper Restriction of Excessive Authentication Attempts7.3 HighN/A1%Aug 10, 2026
CVE-2026-65945: Insertion of Sensitive Information into Log File6.5 MediumN/A1%Aug 10, 2026
CVE-2026-65942: Improper Validation of Certificate with Host Mismatch7.5 HighN/A1%Aug 10, 2026
CVE-2026-61899: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Aug 10, 2026
CVE-2026-55814: Missing Authentication for Critical Function7.5 HighN/A1%Aug 10, 2026
CVE-2026-55799: Improper Control of Generation of Code9.8 CriticalN/A1%Aug 10, 2026
CVE-2026-44416: Improper Control of Generation of Code9.8 CriticalN/A1%Aug 10, 2026
CVE-2026-42537: Improper Control of Generation of Code9.8 CriticalN/A1%Aug 10, 2026
CVE-2026-40920: Improper Privilege Management9.8 CriticalN/A1%Aug 10, 2026
CVE-2026-32227: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Aug 10, 2026
CVE-2026-28672: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A3%Aug 10, 2026
CVE-2026-44630: Memory Allocation with Excessive Size Value7.5 HighN/A1%Aug 10, 2026
CVE-2026-71560: Deserialization of Untrusted Data9.1 CriticalN/A1%Aug 7, 2026
CVE-2026-71559: Deserialization of Untrusted Data7.5 HighN/A1%Aug 7, 2026
CVE-2026-71558: Deserialization of Untrusted Data9.8 CriticalN/A1%Aug 7, 2026
CVE-2026-63725: Improper Neutralization of Special Elements used in an OS Command7.2 High8.6 High0%Aug 6, 2026
CVE-2026-34502: Heap-based Buffer Overflow7.5 HighN/A1%Aug 6, 2026
CVE-2026-34501: Heap-based Buffer Overflow7.5 HighN/A1%Aug 6, 2026
CVE-2026-34191: Improper Neutralization of Special Elements used in an SQL Command9.1 CriticalN/A1%Aug 6, 2026
CVE-2026-32327: Uncontrolled Recursion9.1 CriticalN/A0%Aug 6, 2026
CVE-2025-49506: Observable Timing Discrepancy7.5 HighN/A0%Aug 6, 2026
CVE-2026-68481: Operation on a Resource after Expiration or Release7.5 HighN/A1%Aug 6, 2026
CVE-2026-68079: Authentication Bypass by Capture-replay9.8 CriticalN/A1%Aug 6, 2026
CVE-2026-65583: Insufficient Verification of Data Authenticity9.1 CriticalN/A0%Aug 6, 2026
701-725 of 4460
‹›