The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-6936: Uncontrolled Recursion6.5 MediumN/A0%May 27, 2026
CVE-2026-6053: Allocation of Resources Without Limits or Throttling5.5 MediumN/A0%May 27, 2026
CVE-2026-6052: Uncontrolled Resource Consumption7.5 HighN/A0%May 27, 2026
CVE-2026-6051: Uncontrolled Resource Consumption7.5 HighN/A0%May 27, 2026
CVE-2026-5516: Concurrent Execution using Shared Resource with Improper Synchronization5.9 MediumN/A0%May 27, 2026
CVE-2026-5515: Insecure Storage of Sensitive Information5.5 MediumN/A0%May 27, 2026
CVE-2026-5065: Use of Hard-coded Credentials8.8 HighN/A0%May 27, 2026
CVE-2026-4410: Uncontrolled Resource Consumption7.5 HighN/A1%May 27, 2026
CVE-2026-46064: Out-of-bounds Read7.1 HighN/A0%May 27, 2026
CVE-2026-46042: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%May 27, 2026
CVE-2026-46022: Out-of-bounds Read7.1 HighN/A0%May 27, 2026
CVE-2026-45994: Out-of-bounds Read7.1 HighN/A0%May 27, 2026
CVE-2026-45914: Undefined Security Weakness7.8 HighN/A0%May 27, 2026
CVE-2026-45904: Undefined Security Weakness5.5 MediumN/A0%May 27, 2026
CVE-2026-3676: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%May 27, 2026
CVE-2026-3623: Execution with Unnecessary Privileges7.8 HighN/A0%May 27, 2026
CVE-2026-3366: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%May 27, 2026
CVE-2026-2607: Insertion of Sensitive Information into Log File5.1 MediumN/A0%May 27, 2026
CVE-2026-1718: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%May 27, 2026
CVE-2025-3633: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%May 27, 2026
CVE-2024-56462: Exposure of Backup File to an Unauthorized Control Sphere8.8 HighN/A0%May 27, 2026
CVE-2024-40684: Weak Password Requirements9.8 CriticalN/A0%May 27, 2026
CVE-2024-28765: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%May 27, 2026
CVE-2026-4051: Exposed Dangerous Method or Function7.2 HighN/A0%May 26, 2026
CVE-2026-3660: Incorrect Authorization9.8 CriticalN/A1%May 26, 2026
1301-1325 of 9771
‹›