The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-33858: Deserialization of Untrusted Data8.8 HighN/A0%Apr 13, 2026
CVE-2025-66236: Insertion of Sensitive Information into Log File7.5 HighN/A0%Apr 13, 2026
CVE-2026-34476: Server-Side Request Forgery (SSRF)7.1 HighN/A0%Apr 13, 2026
CVE-2026-35565: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Apr 13, 2026
CVE-2026-35337: Deserialization of Untrusted Data8.8 HighN/A0%Apr 13, 2026
CVE-2026-33704: Unrestricted Upload of File with Dangerous Type7.1 HighN/A0%Apr 10, 2026
CVE-2026-40023: Improper Encoding or Escaping of Output5.3 Medium6.3 Medium0%Apr 10, 2026
CVE-2026-40021: Improper Encoding or Escaping of Output5.3 Medium6.3 Medium0%Apr 10, 2026
CVE-2026-34481: Improper Encoding or Escaping of Output7.5 High6.3 Medium1%Apr 10, 2026
CVE-2026-34480: Improper Encoding or Escaping of Output7.5 High6.9 Medium0%Apr 10, 2026
CVE-2026-34479: Improper Encoding or Escaping of Output7.5 High6.9 Medium0%Apr 10, 2026
CVE-2026-34478: Incorrect Provision of Specified Functionality7.5 High6.9 Medium0%Apr 10, 2026
CVE-2026-34477: Improper Validation of Certificate with Host Mismatch5.9 Medium6.3 Medium0%Apr 10, 2026
CVE-2026-39304: Uncontrolled Resource Consumption7.5 HighN/A1%Apr 10, 2026
CVE-2026-34500: Improper Authentication6.5 MediumN/A0%Apr 9, 2026
CVE-2026-34487: Insertion of Sensitive Information into Log File7.5 HighN/A0%Apr 9, 2026
CVE-2026-34483: Improper Encoding or Escaping of Output7.5 HighN/A0%Apr 9, 2026
CVE-2026-32990: Improper Input Validation5.3 MediumN/A0%Apr 9, 2026
CVE-2026-29145: Improper Authentication9.1 CriticalN/A0%Apr 9, 2026
CVE-2026-29129: Use of a Broken or Risky Cryptographic Algorithm7.5 HighN/A0%Apr 9, 2026
CVE-2026-25854: URL Redirection to Untrusted Site6.1 MediumN/A0%Apr 9, 2026
CVE-2026-24880: Inconsistent Interpretation of HTTP Requests7.5 HighN/A0%Apr 9, 2026
CVE-2026-34486: Missing Encryption of Sensitive DataN/AN/A81%Apr 9, 2026
CVE-2026-29146: Generation of Error Message Containing Sensitive InformationN/AN/A3%Apr 9, 2026
CVE-2026-40046: Integer Overflow or Wraparound7.5 HighN/A0%Apr 9, 2026
1276-1300 of 4464
‹›