The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-40564: Files or Directories Accessible to External Parties6.5 MediumN/A0%May 26, 2026
CVE-2026-48589: URL Redirection to Untrusted Site5.4 Medium0.0 None0%May 25, 2026
CVE-2026-44598: URL Redirection to Untrusted Site5.4 Medium5.1 Medium0%May 25, 2026
CVE-2026-43828: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute6.5 Medium5.9 Medium0%May 25, 2026
CVE-2026-43827: Session Fixation6.5 Medium5.9 Medium1%May 25, 2026
CVE-2026-42797: Exposure of Sensitive Information Through Data Queries4.9 MediumN/A1%May 25, 2026
CVE-2026-42782: Improper Isolation or Compartmentalization7.2 HighN/A1%May 25, 2026
CVE-2026-46745: Improper Neutralization of Special Elements used in an LDAP Query5.3 MediumN/A1%May 25, 2026
CVE-2026-45361: Key Exchange without Entity Authentication8.1 HighN/A1%May 25, 2026
CVE-2026-45249: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%May 25, 2026
CVE-2026-44930: Improper Neutralization of Special Elements used in an LDAP Query9.8 CriticalN/A1%May 22, 2026
CVE-2026-44618: Improper Restriction of XML External Entity Reference5.3 MediumN/A1%May 22, 2026
CVE-2026-44417: Improper Input Validation7.5 HighN/A1%May 22, 2026
CVE-2026-48207: Deserialization of Untrusted Data9.8 CriticalN/A1%May 21, 2026
CVE-2026-45760: Externally Controlled Reference to a Resource in Another Sphere8.1 HighN/A0%May 21, 2026
CVE-2026-42526: Incorrect Authorization5.3 MediumN/A1%May 19, 2026
CVE-2026-27173: Insertion of Sensitive Information into Externally-Accessible File or Directory8.7 HighN/A0%May 19, 2026
CVE-2026-47323: Improper Handling of Case Sensitivity9.8 CriticalN/A2%May 19, 2026
CVE-2026-46586: Improper Control of Generation of Code8.8 HighN/A1%May 19, 2026
CVE-2026-45434: Improper Authentication9.8 CriticalN/A1%May 19, 2026
CVE-2026-45187: Improper Authorization6.5 MediumN/A1%May 19, 2026
CVE-2026-41919: Improper Neutralization of Special Elements used in an LDAP Query9.1 CriticalN/A1%May 19, 2026
CVE-2026-35086: Improper Control of Generation of Code6.5 MediumN/A1%May 19, 2026
CVE-2026-31986: Use of Hard-coded Cryptographic Key9.1 CriticalN/A1%May 19, 2026
CVE-2026-31910: Server-Side Request Forgery (SSRF)7.5 HighN/A1%May 19, 2026
1126-1150 of 4464
‹›