The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-36372: Insertion of Sensitive Information into Externally-Accessible File or Directory6.5 MediumN/A0%Jun 30, 2026
CVE-2026-53234: Undefined Security Weakness7.8 HighN/A0%Jun 25, 2026
CVE-2026-53109: Undefined Security Weakness7.8 HighN/A0%Jun 24, 2026
CVE-2026-53108: Concurrent Execution using Shared Resource with Improper Synchronization4.7 MediumN/A0%Jun 24, 2026
CVE-2026-10852: NULL Pointer Dereference7.5 HighN/A0%Jun 22, 2026
CVE-2026-9610: Direct Request5.3 MediumN/A0%Jun 22, 2026
CVE-2026-9320: Uncontrolled Resource Consumption7.5 HighN/A1%Jun 22, 2026
CVE-2026-9072: Improper Control of Generation of Code9.8 CriticalN/A1%Jun 22, 2026
CVE-2026-9071: Uncontrolled Resource Consumption7.5 HighN/A1%Jun 22, 2026
CVE-2026-9006: Server-Side Request Forgery (SSRF)9.1 CriticalN/A0%Jun 22, 2026
CVE-2026-8858: Improper Control of Generation of Code8.8 HighN/A0%Jun 22, 2026
CVE-2026-8646: Inconsistent Interpretation of HTTP Requests9.1 CriticalN/A1%Jun 22, 2026
CVE-2026-8636: Cleartext Storage of Sensitive Information in Memory7.5 HighN/A0%Jun 22, 2026
CVE-2026-8059: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 22, 2026
CVE-2026-7664: Improper Authentication9.8 CriticalN/A0%Jun 22, 2026
CVE-2026-7253: Improper Neutralization of Special Elements used in an SQL Command6.0 MediumN/A0%Jun 22, 2026
CVE-2026-12628: Use of Hard-coded Credentials9.1 CriticalN/A1%Jun 22, 2026
CVE-2026-11372: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 22, 2026
CVE-2026-10845: Improper Authentication7.3 HighN/A0%Jun 22, 2026
CVE-2024-51454: Improper Neutralization of HTTP Headers for Scripting Syntax6.1 MediumN/A0%Jun 22, 2026
CVE-2023-33854: Authentication Bypass by Capture-replay5.3 MediumN/A0%Jun 22, 2026
CVE-2026-10561: Improper Control of Generation of Code10.0 CriticalN/A1%Jun 22, 2026
CVE-2025-33128: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 22, 2026
CVE-2025-2669: Improper Certificate Validation6.5 MediumN/A0%Jun 22, 2026
CVE-2024-54178: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Jun 22, 2026
1251-1275 of 9771
‹›