The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-40046: Integer Overflow or Wraparound7.5 HighN/A0%Apr 9, 2026
CVE-2026-39962: Improper Neutralization of Special Elements used in an LDAP Query9.6 Critical8.8 High0%Apr 9, 2026
CVE-2026-34020: Use of GET Request Method With Sensitive Query Strings7.5 HighN/A0%Apr 9, 2026
CVE-2026-33266: Use of Hard-coded Cryptographic Key7.5 HighN/A0%Apr 9, 2026
CVE-2026-33005: Improper Handling of Insufficient Privileges4.3 MediumN/A0%Apr 9, 2026
CVE-2026-34538: Exposure of Resource to Wrong Sphere6.5 MediumN/A0%Apr 9, 2026
CVE-2025-62188: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Apr 9, 2026
CVE-2026-35573: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A0%Apr 7, 2026
CVE-2026-32588: Uncontrolled Resource Consumption6.5 MediumN/A0%Apr 7, 2026
CVE-2026-27315: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Apr 7, 2026
CVE-2026-27314: Privilege Defined With Unsafe Actions8.8 HighN/A0%Apr 7, 2026
CVE-2026-35554: Use After Free8.7 HighN/A0%Apr 7, 2026
CVE-2026-33227: Improper Limitation of a Pathname to a Restricted Directory4.3 MediumN/A0%Apr 7, 2026
CVE-2026-34197: Improper Input ValidationN/AN/A96%Apr 7, 2026
CVE-2019-25671: Improper Limitation of a Pathname to a Restricted Directory8.8 High8.7 High0%Apr 5, 2026
CVE-2025-65114: Inconsistent Interpretation of HTTP Requests7.5 HighN/A0%Apr 2, 2026
CVE-2025-58136: Always-Incorrect Control Flow Implementation7.5 HighN/A0%Apr 2, 2026
CVE-2026-34381: Improper Access Control7.5 HighN/A0%Mar 31, 2026
CVE-2026-32794: Improper Certificate Validation4.8 MediumN/A0%Mar 30, 2026
CVE-2026-28369: Inconsistent Interpretation of HTTP Requests9.1 CriticalN/A0%Mar 27, 2026
CVE-2026-28368: Inconsistent Interpretation of HTTP Requests9.1 CriticalN/A0%Mar 27, 2026
CVE-2026-28367: Inconsistent Interpretation of HTTP Requests9.1 CriticalN/A0%Mar 27, 2026
CVE-2026-4649: Missing Authentication for Critical FunctionN/A5.3 Medium0%Mar 24, 2026
CVE-2026-32642: Incorrect Authorization4.3 Medium2.3 Low0%Mar 24, 2026
CVE-2026-33308: Improper Certificate Validation6.8 MediumN/A0%Mar 24, 2026
1301-1325 of 4465
‹›