The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-54226: Integer Overflow or WraparoundN/A6.4 Medium0%Jun 25, 2026
CVE-2026-46752: Heap-based Buffer OverflowN/A10.0 Critical0%Jun 25, 2026
CVE-2026-46751: Undefined Security WeaknessN/A5.5 Medium0%Jun 25, 2026
CVE-2026-45188: Relative Path TraversalN/A2.4 Low0%Jun 25, 2026
CVE-2026-41566: Improper Handling of Insufficient Permissions or PrivilegesN/A9.4 Critical0%Jun 25, 2026
CVE-2026-54665: Origin Validation Error5.3 Medium6.3 Medium0%Jun 22, 2026
CVE-2026-44914: Missing Authorization7.2 High7.5 High1%Jun 22, 2026
CVE-2026-44913: Improper Encoding or Escaping of Output7.2 High5.2 Medium1%Jun 22, 2026
CVE-2026-44911: Incorrect Authorization6.3 Medium2.3 Low1%Jun 22, 2026
CVE-2025-66336: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/A1%Jun 22, 2026
CVE-2025-62198: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A1%Jun 22, 2026
CVE-2026-49872: Improper Authentication8.1 High5.3 Medium1%Jun 19, 2026
CVE-2026-49871: Cross-Site Request Forgery (CSRF)9.3 Critical2.1 Low0%Jun 19, 2026
CVE-2026-49231: Authentication Bypass by Spoofing5.4 Medium2.3 Low1%Jun 19, 2026
CVE-2026-49230: Improper Validation of Integrity Check Value9.1 Critical6.3 Medium0%Jun 19, 2026
CVE-2026-48895: URL Redirection to Untrusted Site7.2 High2.1 Low1%Jun 19, 2026
CVE-2026-47341: Authentication Bypass by Capture-replay6.5 Medium6.3 Medium1%Jun 19, 2026
CVE-2026-47339: Incorrect Authorization8.1 High5.3 Medium0%Jun 19, 2026
CVE-2026-44915: URL Redirection to Untrusted Site6.1 Medium2.1 Low1%Jun 19, 2026
CVE-2026-44087: Insufficient Verification of Data Authenticity9.1 Critical5.3 Medium0%Jun 19, 2026
CVE-2026-44046: Use of Less Trusted Source5.8 Medium2.3 Low0%Jun 19, 2026
CVE-2026-39999: Authentication Bypass by Spoofing9.1 Critical7.0 High1%Jun 19, 2026
CVE-2026-39998: Improper Input Validation8.8 High5.8 Medium1%Jun 19, 2026
CVE-2026-49257: Missing Authentication for Critical Function10.0 CriticalN/A1%Jun 18, 2026
CVE-2026-49268: Improper Neutralization of Special Elements used in an LDAP Query9.1 Critical8.8 High1%Jun 17, 2026
1001-1025 of 4464
‹›