The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-63281: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jul 22, 2026
CVE-2026-13078: Missing Authorization7.7 High6.3 Medium0%Jul 22, 2026
CVE-2026-13071: Use After Free6.5 Medium7.1 High0%Jul 22, 2026
CVE-2026-13066: Access of Resource Using Incompatible Type6.5 Medium7.1 High0%Jul 22, 2026
CVE-2026-64828: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Jul 22, 2026
CVE-2026-8152: URL Redirection to Untrusted SiteN/A9.3 Critical0%Jul 22, 2026
CVE-2026-65598: Time-of-check Time-of-use (TOCTOU) Race Condition7.5 High8.9 High0%Jul 22, 2026
CVE-2026-65592: Improper Neutralization of Input During Web Page Generation5.4 Medium8.4 High0%Jul 22, 2026
CVE-2026-47731: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A1%Jul 21, 2026
CVE-2026-47689: Improper Neutralization of Input During Web Page Generation5.2 MediumN/A0%Jul 21, 2026
CVE-2026-47687: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Jul 21, 2026
CVE-2026-55081: Improper Neutralization of Input During Web Page GenerationN/A7.3 High0%Jul 21, 2026
CVE-2026-46681: Improperly Controlled Modification of Object Prototype AttributesN/A7.2 High0%Jul 21, 2026
CVE-2026-16410: Access of Resource Using Incompatible Type9.8 CriticalN/A0%Jul 21, 2026
CVE-2026-16392: Always-Incorrect Control Flow Implementation9.1 CriticalN/A0%Jul 21, 2026
CVE-2026-16369: Integer Overflow or Wraparound9.8 CriticalN/A0%Jul 21, 2026
CVE-2026-16368: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A0%Jul 21, 2026
CVE-2026-16363: Incorrect Calculation9.8 CriticalN/A0%Jul 21, 2026
CVE-2026-16355: Access of Resource Using Incompatible Type9.8 CriticalN/A0%Jul 21, 2026
CVE-2026-64628: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Jul 21, 2026
CVE-2026-16266: Improperly Controlled Modification of Object Prototype Attributes4.0 Medium6.3 Medium0%Jul 21, 2026
CVE-2026-44230: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 20, 2026
CVE-2026-44229: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 20, 2026
CVE-2026-44228: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 20, 2026
CVE-2026-44227: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 20, 2026
1301-1325 of 10594
‹›