The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-59084: Insufficient Technical Documentation9.1 CriticalN/A1%Jul 14, 2026
CVE-2026-59083: Improper Handling of URL Encoding (Hex Encoding)9.1 CriticalN/A0%Jul 14, 2026
CVE-2026-49972: Unrestricted Upload of File with Dangerous Type8.8 High7.7 High1%Jul 13, 2026
CVE-2026-59245: Improper Privilege Management8.1 HighN/A1%Jul 13, 2026
CVE-2026-58065: Key Exchange without Entity Authentication8.1 HighN/A1%Jul 13, 2026
CVE-2026-49876: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Jul 13, 2026
CVE-2026-41041: Improper Handling of URL Encoding (Hex Encoding)9.1 CriticalN/A1%Jul 13, 2026
CVE-2026-52761: Use of sizeof() on a Pointer Type5.3 MediumN/A0%Jul 10, 2026
CVE-2026-52747: Incorrect Behavior Order: Validate Before Canonicalize8.6 HighN/A0%Jul 10, 2026
CVE-2026-49844: Improper Encoding or Escaping of OutputN/A6.3 Medium1%Jul 10, 2026
CVE-2026-40454: Out-of-bounds Read7.5 HighN/A0%Jul 10, 2026
CVE-2026-40452: Incorrect Authorization7.5 HighN/A0%Jul 10, 2026
CVE-2026-40009: Improper Privilege Management6.5 MediumN/A0%Jul 10, 2026
CVE-2026-40008: Use of Externally-Controlled Input to Select Classes or Code9.8 CriticalN/A1%Jul 10, 2026
CVE-2026-40007: Uncontrolled Recursion7.5 HighN/A0%Jul 10, 2026
CVE-2026-40006: Memory Allocation with Excessive Size Value7.5 HighN/A1%Jul 10, 2026
CVE-2026-40005: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A1%Jul 10, 2026
CVE-2026-28564: Insufficient Session Expiration9.8 CriticalN/A1%Jul 10, 2026
CVE-2026-57111: Missing Origin Validation in WebSockets7.5 HighN/A0%Jul 9, 2026
CVE-2026-41042: Improper Input Validation9.1 CriticalN/A2%Jul 8, 2026
CVE-2026-23698: Unrestricted Upload of File with Dangerous Type7.2 High8.6 High1%Jul 7, 2026
CVE-2026-23697: Unrestricted Upload of File with Dangerous Type8.8 High8.7 High1%Jul 7, 2026
CVE-2026-49487: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A1%Jul 7, 2026
CVE-2026-49296: Authorization Bypass Through User-Controlled Key6.5 MediumN/A1%Jul 7, 2026
CVE-2026-48892: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A1%Jul 7, 2026
901-925 of 4463
‹›