The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-33307: Stack-based Buffer Overflow7.5 HighN/A0%Mar 24, 2026
CVE-2026-3533: Unrestricted Upload of File with Dangerous Type8.8 HighN/A0%Mar 24, 2026
CVE-2026-33071: Unrestricted Upload of File with Dangerous Type4.3 MediumN/A0%Mar 20, 2026
CVE-2026-3547: Out-of-bounds Read7.5 HighN/A0%Mar 19, 2026
CVE-2026-27811: Improper Neutralization of Special Elements used in a Command8.8 HighN/A1%Mar 18, 2026
CVE-2026-30911: Missing Authorization8.1 HighN/A0%Mar 17, 2026
CVE-2026-28779: Exposure of Resource to Wrong Sphere7.5 HighN/A0%Mar 17, 2026
CVE-2026-28563: Incorrect Permission Assignment for Critical Resource4.3 MediumN/A0%Mar 17, 2026
CVE-2026-26929: Incorrect Permission Assignment for Critical Resource6.5 MediumN/A0%Mar 17, 2026
CVE-2025-54920: Deserialization of Untrusted Data8.8 HighN/A0%Mar 16, 2026
CVE-2016-20026: Use of Hard-coded Credentials9.8 Critical9.3 Critical0%Mar 15, 2026
CVE-2026-23941: Inconsistent Interpretation of HTTP Requests9.4 Critical7.0 High1%Mar 13, 2026
CVE-2025-66249: Improper Limitation of a Pathname to a Restricted Directory6.3 MediumN/A0%Mar 13, 2026
CVE-2025-60012: Improper Input Validation6.3 MediumN/A0%Mar 13, 2026
CVE-2026-3963: Use of Hard-coded Cryptographic Key3.7 Low2.9 Low0%Mar 11, 2026
CVE-2026-23907: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Mar 10, 2026
CVE-2026-24713: Improper Input Validation9.8 CriticalN/A0%Mar 9, 2026
CVE-2026-24015: Binding to an Unrestricted IP Address9.8 CriticalN/A0%Mar 9, 2026
CVE-2026-24308: Insertion of Sensitive Information into Log File7.5 HighN/A1%Mar 7, 2026
CVE-2026-24281: Reliance on Reverse DNS Resolution for a Security-Critical Action7.4 HighN/A1%Mar 7, 2026
CVE-2025-40931: Generation of Predictable Numbers or Identifiers9.1 CriticalN/A0%Mar 5, 2026
CVE-2026-27446: Missing Authentication for Critical Function9.8 Critical9.3 Critical0%Mar 4, 2026
CVE-2025-66168: Integer Overflow or Wraparound5.4 MediumN/A0%Mar 4, 2026
CVE-2025-59060: Improper Validation of Certificate with Host Mismatch5.3 MediumN/A0%Mar 3, 2026
CVE-2025-59059: Improper Control of Generation of Code9.8 CriticalN/A0%Mar 3, 2026
1326-1350 of 4465
‹›