The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-48726: Insufficient Session Expiration6.5 MediumN/A1%Jun 1, 2026
CVE-2026-46764: Authorization Bypass Through User-Controlled Key4.3 MediumN/A1%Jun 1, 2026
CVE-2026-46605: Improper Authorization4.3 MediumN/A1%Jun 1, 2026
CVE-2026-45505: Improper Input Validation8.8 HighN/A1%Jun 1, 2026
CVE-2026-45426: Incorrect Authorization3.1 LowN/A1%Jun 1, 2026
CVE-2026-45360: Deserialization of Untrusted Data7.3 HighN/A1%Jun 1, 2026
CVE-2026-44825: Use of Hard-coded Credentials9.8 CriticalN/A3%Jun 1, 2026
CVE-2026-42588: Improper Input Validation8.1 HighN/A1%Jun 1, 2026
CVE-2026-42360: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A1%Jun 1, 2026
CVE-2026-42359: Deserialization of Untrusted Data8.8 HighN/A1%Jun 1, 2026
CVE-2026-42358: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A1%Jun 1, 2026
CVE-2026-42253: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Jun 1, 2026
CVE-2026-42252: Improper Neutralization of Special Elements Used in a Template Engine9.1 CriticalN/A1%Jun 1, 2026
CVE-2026-41084: Authorization Bypass Through User-Controlled Key7.5 HighN/A1%Jun 1, 2026
CVE-2026-41017: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute5.9 MediumN/A0%Jun 1, 2026
CVE-2026-41014: Missing Authorization4.3 MediumN/A1%Jun 1, 2026
CVE-2026-40963: Improper Authorization3.1 LowN/A1%Jun 1, 2026
CVE-2026-40961: URL Redirection to Untrusted Site7.2 HighN/A1%Jun 1, 2026
CVE-2026-40861: Improper Link Resolution Before File Access6.5 MediumN/A1%Jun 1, 2026
CVE-2026-45192: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A1%Jun 1, 2026
CVE-2026-35563: Improper Validation of Certificate with Host Mismatch8.5 High8.8 High0%Jun 1, 2026
CVE-2026-48557: Incomplete List of Disallowed Inputs8.8 High8.7 High1%May 29, 2026
CVE-2026-40914: Incorrect Authorization4.3 MediumN/A1%May 28, 2026
CVE-2025-48977: Relative Path Traversal6.5 Medium8.5 High1%May 28, 2026
CVE-2026-44966: Improperly Controlled Modification of Object Prototype Attributes9.8 CriticalN/A1%May 26, 2026
1101-1125 of 4464
‹›