The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-10569: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Jul 30, 2026
CVE-2026-13444: .NET Misconfiguration: Use of Impersonation8.1 HighN/A0%Jul 30, 2026
CVE-2026-13435: Improper Control of Generation of Code9.9 CriticalN/A1%Jul 30, 2026
CVE-2026-12943: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Jul 30, 2026
CVE-2026-12942: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Jul 30, 2026
CVE-2026-12733: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Jul 30, 2026
CVE-2026-12118: Deserialization of Untrusted Data9.8 CriticalN/A1%Jul 30, 2026
CVE-2026-11904: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Jul 30, 2026
CVE-2026-10700: Authorization Bypass Through User-Controlled Key6.5 MediumN/A1%Jul 30, 2026
CVE-2026-10695: Uncontrolled Resource Consumption5.5 MediumN/A0%Jul 30, 2026
CVE-2026-10545: URL Redirection to Untrusted Site7.5 HighN/A0%Jul 30, 2026
CVE-2026-10535: Stack-based Buffer Overflow7.8 HighN/A0%Jul 30, 2026
CVE-2025-36374: Improper Restriction of XML External Entity Reference5.5 MediumN/A0%Jul 30, 2026
CVE-2025-0152: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 30, 2026
CVE-2024-40683: Insufficient Session Expiration6.3 MediumN/A0%Jul 30, 2026
CVE-2024-25039: Uncontrolled Resource Consumption7.5 HighN/A0%Jul 30, 2026
CVE-2026-9322: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 30, 2026
CVE-2026-12945: Authorization Bypass Through User-Controlled Key7.1 HighN/A0%Jul 30, 2026
CVE-2026-12940: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Jul 30, 2026
CVE-2026-11885: Buffer Copy without Checking Size of Input8.4 HighN/A0%Jul 30, 2026
CVE-2026-10842: Authentication Bypass by Alternate Name7.5 HighN/A1%Jul 30, 2026
CVE-2026-16308: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Jul 30, 2026
CVE-2026-15435: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A1%Jul 30, 2026
CVE-2026-14980: Improper Privilege Management8.8 HighN/A0%Jul 30, 2026
CVE-2026-14522: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Jul 30, 2026
1101-1125 of 9771
‹›