The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-56624: Improper Certificate Validation7.3 HighN/A0%Jul 20, 2026
CVE-2026-56623: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A1%Jul 20, 2026
CVE-2026-56452: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Jul 20, 2026
CVE-2026-53593: Unrestricted Upload of File with Dangerous Type8.8 HighN/A1%Jul 20, 2026
CVE-2026-63071: Improper Isolation or Compartmentalization9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-62418: Server-Side Request Forgery (SSRF)8.1 HighN/A0%Jul 20, 2026
CVE-2026-62183: Improper Privilege Management9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-57308: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-53421: Improper Isolation or Compartmentalization9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-53405: Improper Isolation or Compartmentalization9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-59173: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 18, 2026
CVE-2026-62764: Improper Handling of Insufficient Privileges6.5 Medium5.7 Medium1%Jul 17, 2026
CVE-2026-44182: Improper Neutralization of Special Elements in Output Used by a Downstream Component10.0 Critical10.0 Critical1%Jul 16, 2026
CVE-2026-44181: Improper Neutralization of Special Elements Used in a Template Engine10.0 Critical10.0 Critical1%Jul 16, 2026
CVE-2026-44180: Improper Input Validation9.8 CriticalN/A1%Jul 16, 2026
CVE-2026-33692: Improper Input Validation7.5 HighN/A0%Jul 16, 2026
CVE-2026-26032: Improper Limitation of a Pathname to a Restricted Directory5.4 MediumN/A1%Jul 15, 2026
CVE-2026-57821: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/A1%Jul 15, 2026
CVE-2026-56287: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/A1%Jul 15, 2026
CVE-2026-35152: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A3%Jul 15, 2026
CVE-2026-62393: Improper Handling of Insufficient Permissions or Privileges4.3 MediumN/A0%Jul 14, 2026
CVE-2026-62392: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A2%Jul 14, 2026
CVE-2026-62390: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Jul 14, 2026
CVE-2026-49488: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Jul 14, 2026
CVE-2026-58319: Missing Authentication for Critical Function9.1 CriticalN/A1%Jul 14, 2026
876-900 of 4463
‹›