The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-7871: Deserialization of Untrusted Data9.8 CriticalN/A1%Jun 30, 2026
CVE-2026-7803: Improper Input Validation9.8 CriticalN/A1%Jun 30, 2026
CVE-2026-7663: Improper Authorization9.8 CriticalN/A1%Jun 30, 2026
CVE-2026-3602: External Control of File Name or Path5.5 MediumN/A0%Jun 30, 2026
CVE-2026-13773: Server-Side Request Forgery (SSRF)10.0 CriticalN/A6%Jun 30, 2026
CVE-2026-13772: Use of Externally-Controlled Input to Select Classes or Code9.9 CriticalN/A1%Jun 30, 2026
CVE-2026-13759: Deserialization of Untrusted Data8.8 HighN/A1%Jun 30, 2026
CVE-2026-13449: Improper Restriction of XML External Entity Reference9.1 CriticalN/A0%Jun 30, 2026
CVE-2026-12086: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Jun 30, 2026
CVE-2026-12085: Insertion of Sensitive Information Into Sent Data6.5 MediumN/A0%Jun 30, 2026
CVE-2026-12084: Permissive Cross-domain Policy with Untrusted Domains7.5 HighN/A0%Jun 30, 2026
CVE-2026-11906: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Jun 30, 2026
CVE-2026-11806: Inconsistent Interpretation of HTTP Requests7.5 HighN/A0%Jun 30, 2026
CVE-2026-11714: Server-Side Request Forgery (SSRF)9.8 CriticalN/A0%Jun 30, 2026
CVE-2026-11712: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%Jun 30, 2026
CVE-2026-11708: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%Jun 30, 2026
CVE-2026-11595: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Jun 30, 2026
CVE-2026-11546: Server-Side Request Forgery (SSRF)9.8 CriticalN/A0%Jun 30, 2026
CVE-2026-10564: Server-Side Request Forgery (SSRF)8.2 HighN/A0%Jun 30, 2026
CVE-2026-10560: Improper Authentication9.1 CriticalN/A0%Jun 30, 2026
CVE-2026-10546: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Jun 30, 2026
CVE-2026-10140: Authorization Bypass Through User-Controlled Key9.6 CriticalN/A0%Jun 30, 2026
CVE-2026-10134: Improper Control of Generation of Code10.0 CriticalN/A2%Jun 30, 2026
CVE-2026-10129: Server-Side Request Forgery (SSRF)8.5 HighN/A0%Jun 30, 2026
CVE-2026-10109: Improper Control of Generation of Code9.8 CriticalN/A1%Jun 30, 2026
1226-1250 of 9771
‹›