The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-33208: Improper Neutralization of Special Elements used in an OS Command8.8 High7.4 High0%Apr 24, 2026
CVE-2026-33078: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical8.9 High0%Apr 24, 2026
CVE-2026-33077: Improper Limitation of a Pathname to a Restricted Directory7.5 High7.7 High0%Apr 24, 2026
CVE-2026-33076: Improper Limitation of a Pathname to a Restricted Directory9.8 Critical8.9 High0%Apr 24, 2026
CVE-2026-6857: Deserialization of Untrusted Data7.5 HighN/A0%Apr 22, 2026
CVE-2026-4132: External Control of File Name or Path7.2 HighN/A0%Apr 22, 2026
CVE-2026-2717: Improper Neutralization of CRLF Sequences5.5 MediumN/A0%Apr 22, 2026
CVE-2026-40542: Missing Critical Step in Authentication7.3 HighN/A0%Apr 22, 2026
CVE-2026-33432: Improper Authentication9.1 Critical7.7 High0%Apr 20, 2026
CVE-2026-33431: Path Traversal: '../filedir'6.5 Medium5.7 Medium0%Apr 20, 2026
CVE-2026-6257: Unrestricted Upload of File with Dangerous Type9.1 Critical9.2 Critical0%Apr 20, 2026
CVE-2026-33558: DEPRECATED: Information Exposure Through Server Log Files5.3 MediumN/A0%Apr 20, 2026
CVE-2026-33557: Improper Validation of Specified Index, Position, or Offset in Input9.1 CriticalN/A1%Apr 20, 2026
CVE-2025-66335: Improper Neutralization of Special Elements used in an SQL Command5.3 MediumN/A0%Apr 20, 2026
CVE-2026-40948: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Apr 18, 2026
CVE-2026-32690: Exposure of Resource to Wrong Sphere3.7 LowN/A0%Apr 18, 2026
CVE-2026-30912: Exposure of Resource to Wrong Sphere7.5 HighN/A0%Apr 18, 2026
CVE-2026-25917: Deserialization of Untrusted Data7.2 HighN/A0%Apr 18, 2026
CVE-2026-30778: Exposure of Sensitive Information Through Data Queries7.5 HighN/A0%Apr 15, 2026
CVE-2026-5088: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)7.5 HighN/A0%Apr 15, 2026
CVE-2025-54550: Improper Control of Generation of Code8.1 HighN/A0%Apr 15, 2026
CVE-2026-33929: Improper Limitation of a Pathname to a Restricted Directory4.3 MediumN/A0%Apr 14, 2026
CVE-2026-31924: Cleartext Transmission of Sensitive Information5.3 MediumN/A0%Apr 14, 2026
CVE-2026-31923: Cleartext Transmission of Sensitive Information7.5 HighN/A0%Apr 14, 2026
CVE-2026-31908: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)9.1 CriticalN/A0%Apr 14, 2026
1251-1275 of 4464
‹›