The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-13267: Authentication Bypass by Assumed-Immutable Data8.1 HighN/A0%Aug 12, 2026
CVE-2026-12618: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.2 HighN/A1%Aug 12, 2026
CVE-2026-12359: Improper Authentication8.1 HighN/A0%Aug 12, 2026
CVE-2026-12005: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A1%Aug 12, 2026
CVE-2026-12004: Use of Externally-Controlled Format String8.7 HighN/A0%Aug 12, 2026
CVE-2026-11937: Use After Free3.1 LowN/A0%Aug 12, 2026
CVE-2026-11923: Improper Authentication7.4 HighN/A0%Aug 12, 2026
CVE-2026-18713: Improper Privilege Management8.8 HighN/A1%Aug 12, 2026
CVE-2026-18669: Execution with Unnecessary Privileges8.8 HighN/A1%Aug 12, 2026
CVE-2026-18250: Concurrent Execution using Shared Resource with Improper Synchronization5.0 MediumN/A0%Aug 12, 2026
CVE-2026-18235: Improper Neutralization of Special Elements used in an OS Command8.3 HighN/A1%Aug 12, 2026
CVE-2026-17420: Improper Neutralization of Special Elements used in an OS Command6.3 MediumN/A0%Aug 12, 2026
CVE-2026-17419: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Aug 12, 2026
CVE-2026-17418: Improper Neutralization of Special Elements used in an SQL Command7.8 HighN/A0%Aug 12, 2026
CVE-2026-17276: Improper Privilege Management9.9 CriticalN/A0%Aug 12, 2026
CVE-2026-17271: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Aug 12, 2026
CVE-2026-17268: Authentication Bypass by Capture-replay6.8 MediumN/A0%Aug 12, 2026
CVE-2026-17266: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Aug 12, 2026
CVE-2026-17248: Improper Neutralization of Special Elements used in an OS Command6.5 MediumN/A0%Aug 12, 2026
CVE-2026-17222: Improper Neutralization of Special Elements used in an SQL Command4.3 MediumN/A0%Aug 12, 2026
CVE-2026-17218: Out-of-bounds Write9.8 CriticalN/A1%Aug 12, 2026
CVE-2026-17110: Execution with Unnecessary Privileges8.8 HighN/A1%Aug 12, 2026
CVE-2026-17109: Improper Input Validation4.3 MediumN/A0%Aug 12, 2026
CVE-2026-16956: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Aug 12, 2026
CVE-2026-16931: Loop with Unreachable Exit Condition7.5 HighN/A1%Aug 12, 2026
1026-1050 of 9771
‹›