The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-67608: Improper Neutralization of Special Elements used in an OS Command7.2 High8.6 High2%Aug 3, 2026
CVE-2026-64607: Missing Release of Resource after Effective Lifetime5.3 MediumN/A0%Jul 31, 2026
CVE-2026-62391: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A1%Jul 31, 2026
CVE-2026-44615: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Jul 31, 2026
CVE-2026-66756: Improper Protection of Alternate Path9.8 Critical6.9 Medium1%Jul 30, 2026
CVE-2026-66755: Improper Limitation of a Pathname to a Restricted Directory7.5 High5.9 Medium1%Jul 30, 2026
CVE-2026-52680: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A1%Jul 30, 2026
CVE-2026-48910: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.5 MediumN/A1%Jul 30, 2026
CVE-2026-44617: Improper Neutralization of Special Elements used in an LDAP Query6.5 MediumN/A1%Jul 30, 2026
CVE-2026-44616: Improper Neutralization of Special Elements used in an LDAP Query6.5 MediumN/A1%Jul 30, 2026
CVE-2026-44613: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%Jul 30, 2026
CVE-2026-28814: Missing Authentication for Critical Function7.5 HighN/A1%Jul 30, 2026
CVE-2026-28813: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Jul 30, 2026
CVE-2026-28812: Authentication Bypass by Spoofing9.8 CriticalN/A1%Jul 30, 2026
CVE-2026-28811: Debug Messages Revealing Unnecessary Information7.5 HighN/A1%Jul 30, 2026
CVE-2026-23985: Inefficient Regular Expression Complexity6.5 Medium5.3 Medium1%Jul 30, 2026
CVE-2026-23981: Improper Authorization4.3 Medium5.3 Medium1%Jul 30, 2026
CVE-2026-65100: Incorrect Behavior Order4.8 Medium6.3 Medium1%Jul 29, 2026
CVE-2026-59243: Improper Verification of Cryptographic Signature9.8 CriticalN/A1%Jul 29, 2026
CVE-2026-58189: Server-Side Request Forgery (SSRF)7.5 High8.2 High1%Jul 29, 2026
CVE-2026-58188: Out-of-bounds Write8.2 High8.4 High1%Jul 29, 2026
CVE-2026-58187: Out-of-bounds Write7.5 High6.3 Medium1%Jul 29, 2026
CVE-2026-58186: Improper Input Validation7.5 High8.2 High1%Jul 29, 2026
CVE-2026-58185: Use After Free9.8 Critical8.2 High1%Jul 29, 2026
CVE-2026-58184: Out-of-bounds Write7.5 High8.3 High1%Jul 29, 2026
776-800 of 4460
‹›