The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-53882: Improper Link Resolution Before File AccessN/A8.7 High0%Oct 15, 2026
CVE-2026-50619: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.3 Critical0%Oct 15, 2026
CVE-2026-50612: UNIX Symbolic Link (Symlink) FollowingN/A9.4 Critical0%Oct 15, 2026
CVE-2026-47790: Improper Neutralization of Input During Web Page GenerationN/A6.3 Medium0%Oct 15, 2026
CVE-2026-47786: Improper Neutralization of Special Elements used in an OS CommandN/A9.3 Critical1%Oct 15, 2026
CVE-2026-44084: Authorization Bypass Through User-Controlled Key7.5 High8.7 High0%Oct 15, 2026
CVE-2026-41545: Relative Path TraversalN/A8.6 High1%Oct 15, 2026
CVE-2026-41541: UNIX Symbolic Link (Symlink) FollowingN/A5.3 Medium1%Oct 15, 2026
CVE-2026-39997: Missing Authentication for Critical FunctionN/A8.9 High0%Oct 15, 2026
CVE-2026-39991: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 15, 2026
CVE-2026-39989: Server-Side Request Forgery (SSRF)N/A5.3 Medium0%Oct 15, 2026
CVE-2026-34015: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium8.7 High0%Oct 15, 2026
CVE-2026-34014: Incorrect Permission Assignment for Critical ResourceN/A8.4 High0%Oct 15, 2026
CVE-2026-34009: Improper Isolation or CompartmentalizationN/A8.4 High0%Oct 15, 2026
CVE-2026-34008: Incorrect Permission Assignment for Critical ResourceN/A8.5 High0%Oct 15, 2026
CVE-2026-34007: Improper Neutralization of Special Elements used in an OS CommandN/A6.9 Medium2%Oct 15, 2026
CVE-2026-34006: Missing Authentication for Critical FunctionN/A9.3 Critical1%Oct 15, 2026
CVE-2026-26245: Improper Neutralization of Special Elements used in an SQL Command8.8 High7.1 High0%Oct 15, 2026
CVE-2026-26244: Improper Neutralization of Special Elements used in an SQL Command8.8 High7.1 High0%Oct 15, 2026
CVE-2026-26243: Improper Limitation of a Pathname to a Restricted DirectoryN/A7.2 High1%Oct 15, 2026
CVE-2026-19864: Cleartext Storage of Sensitive InformationN/A5.6 Medium0%Oct 15, 2026
CVE-2026-19863: Authentication Bypass Using an Alternate Path or ChannelN/A9.3 Critical1%Oct 15, 2026
CVE-2026-18662: Incorrect AuthorizationN/A6.9 Medium0%Oct 15, 2026
CVE-2026-18660: Improper Handling of Case SensitivityN/A8.8 High0%Oct 15, 2026
CVE-2026-18659: Incorrect AuthorizationN/A6.9 Medium0%Oct 15, 2026
1051-1075 of 406803
‹›