The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-59292: Incorrect Permission Assignment for Critical Resource3.2 LowN/A0%Aug 27, 2026
CVE-2026-59286: Download of Code Without Integrity Check8.1 HighN/A0%Aug 27, 2026
CVE-2026-59281: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 27, 2026
CVE-2026-55758: Server-Side Request Forgery (SSRF)N/A6.9 Medium0%Aug 27, 2026
CVE-2026-53579: Improper Neutralization of Input During Web Page Generation6.1 Medium9.3 Critical0%Aug 27, 2026
CVE-2026-53578: Improper Neutralization of Input During Web Page Generation6.1 Medium9.3 Critical0%Aug 27, 2026
CVE-2026-48996: Improper Neutralization of Input During Web Page Generation6.1 Medium9.3 Critical0%Aug 27, 2026
CVE-2026-47727: Improper Control of Generation of Code8.8 High8.6 High1%Aug 27, 2026
CVE-2026-81753: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium1%Aug 27, 2026
CVE-2026-59278: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Aug 27, 2026
CVE-2026-47864: Deserialization of Untrusted Data9.8 CriticalN/A6%Aug 27, 2026
CVE-2026-47666: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Aug 26, 2026
CVE-2026-75331: Unrestricted Upload of File with Dangerous Type4.6 MediumN/A0%Aug 26, 2026
CVE-2026-75328: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Aug 26, 2026
CVE-2026-45694: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 26, 2026
CVE-2026-16809: Improper Neutralization of Input During Web Page GenerationN/A7.2 High0%Aug 26, 2026
CVE-2026-75415: Authorization Bypass Through User-Controlled Key7.5 HighN/A0%Aug 26, 2026
CVE-2026-75414: Improper Control of Generation of Code9.8 CriticalN/A1%Aug 26, 2026
CVE-2026-75327: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Aug 26, 2026
CVE-2026-71054: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Aug 26, 2026
CVE-2026-66003: Incorrect AuthorizationN/A7.1 High0%Aug 26, 2026
CVE-2026-54606: Improper Neutralization of Input During Web Page GenerationN/A8.5 High1%Aug 26, 2026
CVE-2026-54550: Improper Limitation of a Pathname to a Restricted Directory7.4 HighN/A0%Aug 26, 2026
CVE-2026-18331: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 26, 2026
CVE-2026-73335: Improper Authorization in Handler for Custom URL Scheme5.3 Medium4.6 Medium0%Aug 26, 2026
1201-1225 of 16388
‹›