The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-48145: Improper Validation of Certificate with Host Mismatch7.5 High8.2 High0%Jul 27, 2026
CVE-2026-48144: Improper Validation of Certificate with Host Mismatch9.1 Critical9.1 Critical0%Jul 27, 2026
CVE-2026-45112: Allocation of Resources Without Limits or Throttling7.5 High6.9 Medium1%Jul 27, 2026
CVE-2026-43871: Loop with Unreachable Exit Condition7.5 High8.7 High1%Jul 27, 2026
CVE-2026-41608: Improper Handling of Highly Compressed Data (Data Amplification)7.5 HighN/A1%Jul 27, 2026
CVE-2026-49326: Missing Authorization6.5 MediumN/A0%Jul 24, 2026
CVE-2026-66144: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 24, 2026
CVE-2026-66143: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 24, 2026
CVE-2026-66142: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 24, 2026
CVE-2026-46452: Improper Input Validation5.3 MediumN/A1%Jul 24, 2026
CVE-2026-45816: NULL Pointer Dereference7.5 HighN/A1%Jul 24, 2026
CVE-2026-45815: Reachable Assertion7.5 HighN/A1%Jul 24, 2026
CVE-2026-45813: Out-of-bounds Write8.8 HighN/A1%Jul 24, 2026
CVE-2026-45812: Incorrect Calculation of Buffer Size6.5 MediumN/A1%Jul 24, 2026
CVE-2026-45811: Buffer Copy without Checking Size of Input7.5 HighN/A0%Jul 24, 2026
CVE-2026-63317: Use of Externally-Controlled Input to Select Classes or Code5.6 MediumN/A1%Jul 24, 2026
CVE-2026-60363: Improper Access Control9.8 CriticalN/A1%Jul 21, 2026
CVE-2026-60080: Use After Free7.3 HighN/A1%Jul 21, 2026
CVE-2026-64606: Deserialization of Untrusted Data9.8 CriticalN/A1%Jul 21, 2026
CVE-2026-64609: Out-of-bounds Read9.1 CriticalN/A1%Jul 21, 2026
CVE-2026-64608: Access of Resource Using Incompatible Type9.8 CriticalN/A1%Jul 21, 2026
CVE-2026-58624: Improper Input Validation5.4 MediumN/A1%Jul 20, 2026
CVE-2026-56624: Improper Certificate Validation7.3 HighN/A0%Jul 20, 2026
CVE-2026-56623: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A1%Jul 20, 2026
CVE-2026-56452: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Jul 20, 2026
851-875 of 4460
‹›