The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-4870: Uncontrolled Recursion7.5 HighN/A0%Jun 12, 2026
CVE-2026-7870: Uncontrolled Search Path Element8.8 HighN/A0%Jun 11, 2026
CVE-2026-7787: Authorization Bypass Through User-Controlled Key8.1 HighN/A0%Jun 11, 2026
CVE-2026-4096: Improper Neutralization of HTTP Headers for Scripting Syntax6.1 MediumN/A0%Jun 11, 2026
CVE-2026-3341: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Jun 11, 2026
CVE-2024-45636: Plaintext Storage of a Password4.4 MediumN/A0%Jun 11, 2026
CVE-2026-46325: Integer Overflow or Wraparound9.8 CriticalN/A0%Jun 9, 2026
CVE-2026-46273: Uncontrolled Resource Consumption8.6 HighN/A1%Jun 3, 2026
CVE-2026-9330: Deserialization of Untrusted Data8.5 HighN/A1%Jun 1, 2026
CVE-2026-9319: Deserialization of Untrusted Data9.0 CriticalN/A1%Jun 1, 2026
CVE-2026-9311: Improper Control of Generation of Code9.0 CriticalN/A1%Jun 1, 2026
CVE-2026-8644: Authentication Bypass by Spoofing9.1 CriticalN/A0%Jun 1, 2026
CVE-2026-7770: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.8 HighN/A1%Jun 1, 2026
CVE-2026-1248: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%May 27, 2026
CVE-2026-9035: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%May 27, 2026
CVE-2026-8405: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%May 27, 2026
CVE-2026-8180: NULL Pointer Dereference7.5 HighN/A0%May 27, 2026
CVE-2026-8179: Stack-based Buffer Overflow8.8 HighN/A1%May 27, 2026
CVE-2026-8175: Heap-based Buffer Overflow9.8 CriticalN/A1%May 27, 2026
CVE-2026-7876: Improper Authentication9.1 CriticalN/A1%May 27, 2026
CVE-2026-7528: Uncontrolled Resource Consumption7.5 HighN/A0%May 27, 2026
CVE-2026-7524: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A1%May 27, 2026
CVE-2026-7365: Use of Default Credentials7.8 HighN/A0%May 27, 2026
CVE-2026-7254: Improper Validation of Specified Quantity in Input5.3 MediumN/A0%May 27, 2026
CVE-2026-6938: Improper Authorization7.5 HighN/A0%May 27, 2026
1276-1300 of 9771
‹›