The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-16973: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Aug 20, 2026
CVE-2026-16972: Improper Authentication7.5 HighN/A0%Aug 20, 2026
CVE-2026-16964: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Aug 20, 2026
CVE-2026-16958: Out-of-bounds Write7.5 HighN/A0%Aug 20, 2026
CVE-2026-16952: Uncontrolled Resource Consumption5.5 MediumN/A0%Aug 20, 2026
CVE-2026-16951: Out-of-bounds Write6.7 MediumN/A0%Aug 20, 2026
CVE-2026-16946: Out-of-bounds Write7.8 HighN/A0%Aug 20, 2026
CVE-2026-16945: Stack-based Buffer Overflow7.8 HighN/A0%Aug 20, 2026
CVE-2026-16944: Out-of-bounds Write7.8 HighN/A0%Aug 20, 2026
CVE-2026-16943: Out-of-bounds Write7.8 HighN/A0%Aug 20, 2026
CVE-2026-16937: Improper Privilege Management7.8 HighN/A0%Aug 20, 2026
CVE-2026-16936: Out-of-bounds Write8.8 HighN/A0%Aug 20, 2026
CVE-2026-16935: Time-of-check Time-of-use (TOCTOU) Race Condition7.0 HighN/A0%Aug 20, 2026
CVE-2026-16934: Out-of-bounds Write8.8 HighN/A0%Aug 20, 2026
CVE-2026-16932: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Aug 20, 2026
CVE-2026-16928: Heap-based Buffer Overflow7.5 HighN/A1%Aug 20, 2026
CVE-2026-16927: Time-of-check Time-of-use (TOCTOU) Race Condition7.0 HighN/A0%Aug 20, 2026
CVE-2026-16926: External Control of File Name or Path9.1 CriticalN/A1%Aug 20, 2026
CVE-2026-16925: Improper Authorization7.8 HighN/A0%Aug 20, 2026
CVE-2026-16924: Integer Underflow (Wrap or Wraparound)7.5 HighN/A1%Aug 20, 2026
CVE-2026-16923: Improper Privilege Management7.8 HighN/A0%Aug 20, 2026
CVE-2026-16922: Time-of-check Time-of-use (TOCTOU) Race Condition7.0 HighN/A0%Aug 20, 2026
CVE-2025-36398: External Control of File Name or Path5.4 MediumN/A0%Aug 19, 2026
CVE-2025-36255: Privilege Defined With Unsafe Actions8.8 HighN/A0%Aug 19, 2026
CVE-2025-36254: Improper Encoding or Escaping of Output7.4 HighN/A0%Aug 19, 2026
776-800 of 9771
‹›