Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-6766: Improper Check for Unusual or Exceptional Conditions7.5 HighN/A0%Apr 21, 2026
CVE-2026-6765: Exposure of Private Personal Information to an Unauthorized Actor5.3 MediumN/A0%Apr 21, 2026
CVE-2026-6764: Improper Restriction of Operations within the Bounds of a Memory Buffer6.5 MediumN/A0%Apr 21, 2026
CVE-2026-6763: Protection Mechanism Failure6.5 MediumN/A0%Apr 21, 2026
CVE-2026-6762: Authentication Bypass by Spoofing6.3 MediumN/A0%Apr 21, 2026
CVE-2026-6761: Improper Privilege Management8.8 HighN/A0%Apr 21, 2026
CVE-2026-6760: Authentication Bypass Using an Alternate Path or Channel9.8 CriticalN/A0%Apr 21, 2026
CVE-2026-6759: Use After Free7.5 HighN/A0%Apr 21, 2026
CVE-2026-6758: Use After Free7.5 HighN/A0%Apr 21, 2026
CVE-2026-6757: Access of Uninitialized Pointer6.3 MediumN/A0%Apr 21, 2026
CVE-2026-6755: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Apr 21, 2026
CVE-2026-6754: Use After Free7.5 HighN/A0%Apr 21, 2026
CVE-2026-6753: Improper Restriction of Operations within the Bounds of a Memory Buffer7.3 HighN/A0%Apr 21, 2026
CVE-2026-6752: Improper Restriction of Operations within the Bounds of a Memory Buffer7.3 HighN/A0%Apr 21, 2026
CVE-2026-6751: Use of Uninitialized Variable7.3 HighN/A0%Apr 21, 2026
CVE-2026-6750: Improper Privilege Management8.8 HighN/A0%Apr 21, 2026
CVE-2026-6749: Use of Uninitialized Resource7.5 HighN/A0%Apr 21, 2026
CVE-2026-6748: Use of Uninitialized Variable9.8 CriticalN/A0%Apr 21, 2026
CVE-2026-6747: Use After Free7.5 HighN/A0%Apr 21, 2026
CVE-2026-6746: Use After Free7.5 HighN/A1%Apr 21, 2026
CVE-2026-5735: Out-of-bounds Write9.8 CriticalN/A0%Apr 7, 2026
CVE-2026-5734: Out-of-bounds Write9.8 CriticalN/A0%Apr 7, 2026
CVE-2026-5733: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A0%Apr 7, 2026
CVE-2026-5732: Integer Overflow or Wraparound8.8 HighN/A0%Apr 7, 2026
CVE-2026-5731: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A0%Apr 7, 2026
776-800 of 2523