The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-54475: Missing Authorization7.5 HighN/A1%Jun 30, 2026
CVE-2026-53917: Memory Allocation with Excessive Size Value7.5 HighN/A1%Jun 30, 2026
CVE-2026-53916: Memory Allocation with Excessive Size Value7.5 HighN/A1%Jun 30, 2026
CVE-2026-52760: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Jun 30, 2026
CVE-2026-50750: Uncontrolled Resource Consumption7.5 HighN/A1%Jun 30, 2026
CVE-2026-50734: Memory Allocation with Excessive Size Value7.5 HighN/A1%Jun 30, 2026
CVE-2026-49877: Improper Authorization8.1 HighN/A1%Jun 30, 2026
CVE-2026-49434: Improper Input Validation7.5 HighN/A1%Jun 30, 2026
CVE-2026-49432: Improper Input Validation7.5 HighN/A1%Jun 30, 2026
CVE-2026-55957: Missing Critical Step in Authentication7.3 HighN/A3%Jun 29, 2026
CVE-2026-55956: Improper Authorization6.5 MediumN/A1%Jun 29, 2026
CVE-2026-55955: Improper Authentication6.5 MediumN/A0%Jun 29, 2026
CVE-2026-55276: Always-Incorrect Control Flow Implementation9.1 CriticalN/A1%Jun 29, 2026
CVE-2026-53434: Detection of Error Condition Without Action9.1 CriticalN/A1%Jun 29, 2026
CVE-2026-53404: Always-Incorrect Control Flow Implementation7.3 HighN/A1%Jun 29, 2026
CVE-2026-50229: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 MediumN/A4%Jun 29, 2026
CVE-2026-57915: Missing Critical Step in Authentication7.3 HighN/A1%Jun 26, 2026
CVE-2025-64152: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A1%Jun 26, 2026
CVE-2025-55017: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A1%Jun 26, 2026
CVE-2026-57914: Uncontrolled Resource Consumption6.5 MediumN/A0%Jun 26, 2026
CVE-2026-49486: Cleartext Transmission of Sensitive Information7.5 HighN/A0%Jun 26, 2026
CVE-2026-48946: Unrestricted Upload of File with Dangerous Type6.3 MediumN/A0%Jun 25, 2026
CVE-2026-56130: Authentication Bypass by Capture-replayN/A2.0 Low0%Jun 25, 2026
CVE-2026-56091: Authentication Bypass by Alternate NameN/A8.2 High1%Jun 25, 2026
CVE-2026-54226: Integer Overflow or WraparoundN/A6.4 Medium0%Jun 25, 2026
976-1000 of 4463
‹›