The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-7658: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Aug 5, 2026
CVE-2026-17633: Improper Control of Generation of Code8.8 HighN/A1%Aug 5, 2026
CVE-2026-17632: Improper Control of Generation of Code8.8 HighN/A1%Aug 5, 2026
CVE-2026-17624: Improper Control of Generation of Code8.8 HighN/A1%Aug 5, 2026
CVE-2026-10547: Improper Access Control8.1 HighN/A0%Aug 5, 2026
CVE-2026-9081: Server-Side Request Forgery (SSRF)7.1 HighN/A0%Aug 5, 2026
CVE-2026-7657: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Aug 5, 2026
CVE-2026-17625: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 5, 2026
CVE-2026-10128: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Aug 5, 2026
CVE-2026-9077: Reliance on Untrusted Inputs in a Security Decision8.5 HighN/A0%Aug 5, 2026
CVE-2026-8446: Missing Authentication for Critical Function7.5 HighN/A0%Aug 5, 2026
CVE-2026-7646: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Aug 5, 2026
CVE-2026-17630: Incomplete List of Disallowed Inputs8.8 HighN/A1%Aug 5, 2026
CVE-2026-17626: Incorrect Privilege Assignment8.8 HighN/A0%Aug 5, 2026
CVE-2026-17623: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 5, 2026
CVE-2026-17617: Server-Side Request Forgery (SSRF)9.8 CriticalN/A0%Aug 5, 2026
CVE-2026-8400: Use of Externally-Controlled Input to Select Classes or Code9.8 CriticalN/A0%Aug 5, 2026
CVE-2026-18531: Use of Insufficiently Random Values5.3 MediumN/A0%Aug 5, 2026
CVE-2026-15656: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute4.3 MediumN/A0%Aug 5, 2026
CVE-2026-13477: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Aug 5, 2026
CVE-2026-12762: Insertion of Sensitive Information into Externally-Accessible File or Directory5.3 MediumN/A0%Aug 5, 2026
CVE-2026-12730: Improper Validation of Certificate with Host Mismatch3.8 LowN/A0%Aug 5, 2026
CVE-2026-10025: Improper Restriction of XML External Entity Reference9.8 CriticalN/A1%Aug 5, 2026
CVE-2026-12946: Improper Control of Generation of Code9.9 CriticalN/A1%Jul 30, 2026
CVE-2026-11536: Deserialization of Untrusted Data8.5 HighN/A1%Jul 30, 2026
1076-1100 of 9771
‹›