The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-8505: Missing Authentication for Critical Function9.8 CriticalN/A1%Jul 17, 2026
CVE-2026-8481: Improper Control of Generation of Code9.9 CriticalN/A1%Jul 17, 2026
CVE-2026-8476: Deserialization of Untrusted Data9.9 CriticalN/A1%Jul 17, 2026
CVE-2026-8056: Improper Control of Generation of Code8.8 HighN/A1%Jul 17, 2026
CVE-2026-7872: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A1%Jul 17, 2026
CVE-2026-7771: Loop with Unreachable Exit Condition5.5 MediumN/A0%Jul 17, 2026
CVE-2026-7755: Improper Input Validation8.8 HighN/A1%Jul 17, 2026
CVE-2026-7754: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Jul 17, 2026
CVE-2026-7667: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Jul 17, 2026
CVE-2026-7364: URL Redirection to Untrusted Site6.1 MediumN/A0%Jul 17, 2026
CVE-2026-4942: Selection of Less-Secure Algorithm During Negotiation7.5 HighN/A0%Jul 17, 2026
CVE-2026-4938: Incorrect Authorization6.5 MediumN/A0%Jul 17, 2026
CVE-2026-15995: Concurrent Execution using Shared Resource with Improper Synchronization4.2 MediumN/A0%Jul 17, 2026
CVE-2026-15322: Use of GET Request Method With Sensitive Query Strings7.5 HighN/A1%Jul 17, 2026
CVE-2026-15093: URL Redirection to Untrusted Site4.3 MediumN/A0%Jul 17, 2026
CVE-2026-15091: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Jul 17, 2026
CVE-2026-15069: Improper Neutralization of Special Elements used in an OS Command5.4 MediumN/A0%Jul 17, 2026
CVE-2026-14979: Improper Restriction of Recursive Entity References in DTDs7.5 HighN/A1%Jul 17, 2026
CVE-2026-14971: Undefined Security Weakness7.0 HighN/A0%Jul 17, 2026
CVE-2026-14501: Use of Potentially Dangerous Function9.8 CriticalN/A0%Jul 17, 2026
CVE-2026-14499: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Jul 17, 2026
CVE-2026-13473: Heap-based Buffer Overflow9.8 CriticalN/A1%Jul 17, 2026
CVE-2026-13448: Incomplete List of Disallowed Inputs9.8 CriticalN/A1%Jul 17, 2026
CVE-2026-9171: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 17, 2026
CVE-2026-9135: Improper Control of Generation of Code9.9 CriticalN/A1%Jul 17, 2026
1176-1200 of 9771
‹›