The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-9103: Missing Authentication for Critical Function9.8 CriticalN/A3%Jul 17, 2026
CVE-2026-9762: Improper Control of Generation of Code7.8 HighN/A0%Jul 17, 2026
CVE-2026-9202: Missing Authentication for Critical Function9.8 CriticalN/A1%Jul 17, 2026
CVE-2026-9198: Improper Control of Generation of Code9.8 CriticalN/A29%Jul 17, 2026
CVE-2026-51539: Uncontrolled Resource Consumption7.5 HighN/A0%Jul 13, 2026
CVE-2026-52747: Incorrect Behavior Order: Validate Before Canonicalize8.6 HighN/A0%Jul 10, 2026
CVE-2026-9074: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Jul 8, 2026
CVE-2026-3144: Use of Default Credentials9.8 CriticalN/A0%Jul 8, 2026
CVE-2026-11541: Inconsistent Interpretation of HTTP Requests9.8 CriticalN/A0%Jun 30, 2026
CVE-2026-11594: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 30, 2026
CVE-2025-36359: Insufficient Session Expiration6.5 MediumN/A0%Jun 30, 2026
CVE-2025-36336: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Jun 30, 2026
CVE-2025-36333: Improper Enforcement of Behavioral Workflow4.3 MediumN/A0%Jun 30, 2026
CVE-2025-36328: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Jun 30, 2026
CVE-2025-36327: Client-Side Enforcement of Server-Side Security6.5 MediumN/A0%Jun 30, 2026
CVE-2025-36324: Server-Side Request Forgery (SSRF)4.3 MediumN/A0%Jun 30, 2026
CVE-2025-36323: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 30, 2026
CVE-2025-36321: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.7 MediumN/A0%Jun 30, 2026
CVE-2025-36320: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jun 30, 2026
CVE-2025-36319: Allocation of Resources Without Limits or Throttling4.3 MediumN/A0%Jun 30, 2026
CVE-2025-12530: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Jun 30, 2026
CVE-2026-9836: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Jun 30, 2026
CVE-2026-9002: Uncontrolled Resource Consumption6.5 MediumN/A0%Jun 30, 2026
CVE-2026-7874: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)9.1 CriticalN/A0%Jun 30, 2026
CVE-2026-7873: Improper Control of Generation of Code9.9 CriticalN/A1%Jun 30, 2026
1201-1225 of 9771
‹›