The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-16907: Out-of-bounds Write7.6 HighN/A1%Aug 12, 2026
CVE-2026-16906: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 12, 2026
CVE-2026-16904: Improper Privilege Management8.1 HighN/A1%Aug 12, 2026
CVE-2026-16863: Out-of-bounds Read7.7 HighN/A0%Aug 12, 2026
CVE-2026-16860: Uncontrolled Search Path Element9.9 CriticalN/A1%Aug 12, 2026
CVE-2026-16856: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 12, 2026
CVE-2026-18847: Origin Validation Error9.8 CriticalN/A0%Aug 12, 2026
CVE-2026-18683: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 12, 2026
CVE-2026-18499: Improper Authorization8.1 HighN/A0%Aug 12, 2026
CVE-2026-18246: Interpretation Conflict4.3 MediumN/A0%Aug 12, 2026
CVE-2026-18144: Improper Authorization4.3 MediumN/A0%Aug 12, 2026
CVE-2026-18106: Improper Limitation of a Pathname to a Restricted Directory4.3 MediumN/A0%Aug 12, 2026
CVE-2026-18098: Origin Validation Error8.1 HighN/A0%Aug 12, 2026
CVE-2026-17095: Improperly Controlled Modification of Dynamically-Determined Object Attributes8.3 HighN/A1%Aug 12, 2026
CVE-2026-17094: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A1%Aug 12, 2026
CVE-2026-16694: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 12, 2026
CVE-2026-9205: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)9.8 CriticalN/A0%Aug 5, 2026
CVE-2026-9201: Inadequate Encryption Strength8.8 HighN/A0%Aug 5, 2026
CVE-2026-9196: Improper Control of Generation of Code8.8 HighN/A1%Aug 5, 2026
CVE-2026-9130: Authorization Bypass Through User-Controlled Key7.1 HighN/A0%Aug 5, 2026
CVE-2026-8478: Improper Control of Generation of Code8.8 HighN/A1%Aug 5, 2026
CVE-2026-8470: Use of a Broken or Risky Cryptographic Algorithm9.1 CriticalN/A0%Aug 5, 2026
CVE-2026-8183: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A1%Aug 5, 2026
CVE-2026-8182: Improper Control of Generation of Code8.8 HighN/A1%Aug 5, 2026
CVE-2026-7869: Improper Limitation of a Pathname to a Restricted Directory5.4 MediumN/A0%Aug 5, 2026
1051-1075 of 9771
‹›