The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-75978: Incorrect Privilege Assignment6.3 Medium2.1 Low0%Aug 19, 2026
CVE-2026-21580: Improper Neutralization of Input During Web Page GenerationN/A9.3 Critical1%Aug 18, 2026
CVE-2026-70907: Improper Access Control5.3 MediumN/A0%Aug 18, 2026
CVE-2026-70906: Uncontrolled Resource Consumption7.5 HighN/A0%Aug 18, 2026
CVE-2026-70681: Improper Access Control7.5 HighN/A0%Aug 18, 2026
CVE-2026-60589: Exposure of Sensitive Information to an Unauthorized Actor3.7 LowN/A0%Aug 18, 2026
CVE-2026-54347: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Aug 18, 2026
CVE-2026-61308: Improper Access Control6.8 MediumN/A0%Aug 18, 2026
CVE-2026-75936: Improper Handling of Highly Compressed Data (Data Amplification)7.5 High8.7 High1%Aug 18, 2026
CVE-2026-75935: Memory Allocation with Excessive Size Value7.5 High8.7 High1%Aug 18, 2026
CVE-2026-75876: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 18, 2026
CVE-2026-71322: Missing Authorization4.3 MediumN/A0%Aug 18, 2026
CVE-2026-67921: Cross-Site Request Forgery (CSRF)9.3 CriticalN/A0%Aug 18, 2026
CVE-2026-61696: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.3 MediumN/A0%Aug 18, 2026
CVE-2026-52609: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 18, 2026
CVE-2026-69220: Uncontrolled RecursionN/A8.7 High1%Aug 18, 2026
CVE-2026-69219: Memory Allocation with Excessive Size ValueN/A8.7 High1%Aug 18, 2026
CVE-2026-63337: Use of Externally-Controlled Input to Select Classes or CodeN/A7.5 High1%Aug 18, 2026
CVE-2026-63336: Improper Certificate ValidationN/A5.1 Medium0%Aug 18, 2026
CVE-2026-63335: Improper Input ValidationN/A6.3 Medium1%Aug 18, 2026
CVE-2026-61634: Improper Input ValidationN/A0.0 None0%Aug 18, 2026
CVE-2026-52606: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 18, 2026
CVE-2026-75915: Exposure of Sensitive Information to an Unauthorized Actor7.5 High8.7 High1%Aug 18, 2026
CVE-2026-55839: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Aug 18, 2026
CVE-2026-45118: Improper Neutralization of Script in Attributes in a Web Page9.3 CriticalN/A1%Aug 18, 2026
1326-1350 of 16388
‹›