The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-43986: Server-Side Request Forgery (SSRF)9.9 CriticalN/A0%Jun 4, 2026
CVE-2026-40930: Interpretation Conflict5.4 MediumN/A0%Jun 4, 2026
CVE-2026-44460: Exposure of Sensitive Information to an Unauthorized Actor7.4 HighN/A0%May 27, 2026
CVE-2026-8134: Improper Control of Filename for Include/Require Statement in PHP Program7.2 High9.4 Critical1%May 21, 2026
CVE-2026-32814: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%May 19, 2026
CVE-2026-33633: Heap-based Buffer Overflow8.8 HighN/A0%May 19, 2026
CVE-2026-8814: Improper Handling of Highly Compressed Data (Data Amplification)5.3 Medium5.5 Medium1%May 19, 2026
CVE-2026-45242: Missing Authorization7.1 High7.1 High1%May 18, 2026
CVE-2026-4054: Improper Check for Unusual or Exceptional Conditions6.5 MediumN/A0%May 15, 2026
CVE-2026-45448: URL Redirection to Untrusted Site4.3 MediumN/A0%May 14, 2026
CVE-2026-43877: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%May 11, 2026
CVE-2018-25279: Memory Allocation with Excessive Size Value6.2 Medium6.9 Medium0%Apr 26, 2026
CVE-2026-33020: Heap-based Buffer Overflow7.1 HighN/A0%Apr 14, 2026
CVE-2026-40107: Server-Side Request Forgery (SSRF)6.5 Medium8.7 High0%Apr 9, 2026
CVE-2026-34757: Use After Free5.1 MediumN/A0%Apr 9, 2026
CVE-2026-39370: Server-Side Request Forgery (SSRF)7.1 HighN/A0%Apr 7, 2026
CVE-2026-34576: Server-Side Request Forgery (SSRF)7.7 High8.3 High0%Apr 2, 2026
CVE-2023-7339: Stack-based Buffer Overflow6.5 MediumN/A0%Mar 27, 2026
CVE-2026-33636: Out-of-bounds Read7.6 HighN/A0%Mar 26, 2026
CVE-2026-33416: Use After Free7.5 HighN/A1%Mar 26, 2026
CVE-2026-29976: Buffer Copy without Checking Size of Input6.2 MediumN/A0%Mar 26, 2026
CVE-2026-4468: Improper Neutralization of Special Elements used in a Command4.7 Medium2.0 Low3%Mar 20, 2026
CVE-2026-32753: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 Medium8.5 High0%Mar 19, 2026
CVE-2026-29112: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Mar 18, 2026
CVE-2026-30883: Improper Restriction of Operations within the Bounds of a Memory Buffer5.7 MediumN/A0%Mar 10, 2026
51-75 of 592
‹›