The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-14512: Deserialization of Untrusted Data9.8 CriticalN/A1%Jul 28, 2026
CVE-2026-14446: Missing Authentication for Critical Function9.8 CriticalN/A1%Jul 28, 2026
CVE-2026-13463: Use of Hard-coded Credentials7.5 HighN/A0%Jul 28, 2026
CVE-2026-13442: .NET Misconfiguration: Use of Impersonation7.1 HighN/A0%Jul 28, 2026
CVE-2026-3158: Inclusion of Sensitive Information in Source Code Comments4.3 MediumN/A0%Jul 28, 2026
CVE-2026-3157: Inclusion of Sensitive Information in Source Code Comments4.3 MediumN/A0%Jul 28, 2026
CVE-2026-1918: Insertion of Sensitive Information into Log File4.9 MediumN/A0%Jul 28, 2026
CVE-2026-16192: Uncontrolled Recursion6.5 MediumN/A0%Jul 28, 2026
CVE-2026-16184: Missing Authorization9.8 CriticalN/A0%Jul 28, 2026
CVE-2026-16107: Improper Certificate Validation5.9 MediumN/A0%Jul 28, 2026
CVE-2026-7769: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/A0%Jul 28, 2026
CVE-2026-7362: Improper Access Control6.5 MediumN/A0%Jul 28, 2026
CVE-2026-4932: Insufficient Entropy4.2 MediumN/A0%Jul 28, 2026
CVE-2026-8058: Exposure of Sensitive Information to an Unauthorized Actor4.5 MediumN/A0%Jul 28, 2026
CVE-2026-7868: Incorrect Authorization6.5 MediumN/A0%Jul 28, 2026
CVE-2026-7775: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jul 28, 2026
CVE-2026-64318: Undefined Security Weakness7.1 HighN/A0%Jul 25, 2026
CVE-2026-13063: Integer Overflow or Wraparound6.5 Medium5.3 Medium0%Jul 22, 2026
CVE-2026-3482: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Jul 22, 2026
CVE-2026-10678: NULL Pointer Dereference8.1 HighN/A0%Jul 21, 2026
CVE-2026-13446: Use of Hard-coded Credentials9.8 CriticalN/A0%Jul 17, 2026
CVE-2026-13445: Authorization Bypass Through User-Controlled Key8.1 HighN/A0%Jul 17, 2026
CVE-2026-8861: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Jul 17, 2026
CVE-2026-8859: Improper Limitation of a Pathname to a Restricted Directory9.9 CriticalN/A1%Jul 17, 2026
CVE-2026-8635: Improper Control of Generation of Code9.9 CriticalN/A1%Jul 17, 2026
1151-1175 of 9771
‹›