The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-6722: Use After Free9.8 Critical9.5 Critical1%May 10, 2026
CVE-2026-39816: Missing Authorization8.8 High7.5 High0%May 8, 2026
CVE-2026-25199: Exposure of Sensitive Information to an Unauthorized Actor9.1 CriticalN/A0%May 8, 2026
CVE-2026-25077: Improper Control of Generation of Code8.8 HighN/A0%May 8, 2026
CVE-2025-69233: Time-of-check Time-of-use (TOCTOU) Race Condition5.3 MediumN/A0%May 8, 2026
CVE-2025-66467: Incomplete Cleanup8.1 HighN/A0%May 8, 2026
CVE-2025-66172: Exposure of Private Personal Information to an Unauthorized Actor8.1 HighN/A0%May 8, 2026
CVE-2025-66171: Exposure of Private Personal Information to an Unauthorized Actor6.5 MediumN/A0%May 8, 2026
CVE-2025-66170: Incorrect Authorization6.5 MediumN/A0%May 8, 2026
CVE-2013-10075: Operation on a Resource after Expiration or Release9.1 CriticalN/A0%May 8, 2026
CVE-2026-33844: Improper Input Validation9.0 CriticalN/A0%May 7, 2026
CVE-2026-33109: Improper Access Control9.9 CriticalN/A0%May 7, 2026
CVE-2026-42241: Memory Allocation with Excessive Size Value5.3 MediumN/A0%May 7, 2026
CVE-2026-41930: Missing Authentication for Critical Function9.8 Critical9.2 Critical1%May 6, 2026
CVE-2026-5081: Generation of Predictable Numbers or Identifiers9.1 CriticalN/A0%May 6, 2026
CVE-2026-43975: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%May 6, 2026
CVE-2026-43646: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%May 6, 2026
CVE-2026-42509: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 6, 2026
CVE-2026-40010: Session Fixation9.1 CriticalN/A0%May 6, 2026
CVE-2026-40075: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.2 High0%May 5, 2026
CVE-2026-28780: Heap-based Buffer Overflow9.8 CriticalN/A1%May 5, 2026
CVE-2026-30923: Out-of-bounds Read7.5 High8.2 High0%May 5, 2026
CVE-2026-29168: Allocation of Resources Without Limits or Throttling7.3 HighN/A1%May 5, 2026
CVE-2026-43870: Origin Validation Error7.3 HighN/A0%May 5, 2026
CVE-2026-43869: Improper Validation of Certificate with Host Mismatch7.3 HighN/A1%May 5, 2026
1176-1200 of 4464
‹›