The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-22922: Incorrect Use of Privileged APIs6.5 MediumN/A0%Feb 9, 2026
CVE-2026-23903: Authentication Bypass by Alternate Name5.3 MediumN/A0%Feb 9, 2026
CVE-2026-24735: Exposure of Private Personal Information to an Unauthorized Actor7.5 HighN/A0%Feb 4, 2026
CVE-2026-23795: Improper Restriction of XML External Entity Reference4.9 MediumN/A0%Feb 3, 2026
CVE-2026-23794: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Feb 3, 2026
CVE-2020-36939: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High1%Jan 27, 2026
CVE-2026-24807: Improper Verification of Cryptographic SignatureN/A5.3 Medium0%Jan 27, 2026
CVE-2026-24806: Improper Control of Generation of CodeN/A5.3 Medium0%Jan 27, 2026
CVE-2026-1464: Integer Overflow or WraparoundN/A4.6 Medium0%Jan 27, 2026
CVE-2016-15057: Improper Neutralization of Special Elements used in a Command9.9 CriticalN/A33%Jan 26, 2026
CVE-2026-24656: Deserialization of Untrusted Data3.7 LowN/A0%Jan 26, 2026
CVE-2025-27821: Out-of-bounds Write7.3 HighN/A0%Jan 26, 2026
CVE-2026-22444: Improper Input Validation7.1 HighN/A0%Jan 21, 2026
CVE-2026-22022: Improper Authorization8.2 HighN/A0%Jan 21, 2026
CVE-2026-21962: Improper Access Control10.0 CriticalN/A43%Jan 20, 2026
CVE-2025-59355: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Jan 19, 2026
CVE-2025-29847: Improper Input Validation7.5 HighN/A0%Jan 19, 2026
CVE-2026-23529: External Control of File Name or Path7.7 HighN/A0%Jan 16, 2026
CVE-2025-68675: Insertion of Sensitive Information into Log File7.5 HighN/A0%Jan 16, 2026
CVE-2025-68438: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Jan 16, 2026
CVE-2025-60021: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A0%Jan 16, 2026
CVE-2026-22265: Improper Neutralization of Special Elements used in an OS Command7.5 HighN/A0%Jan 15, 2026
CVE-2025-66169: Improper Neutralization of Special Elements used in an SQL Command5.3 MediumN/A0%Jan 14, 2026
CVE-2025-68493: Improper Restriction of XML External Entity ReferenceN/AN/A23%Jan 11, 2026
CVE-2025-62235: Authentication Bypass by Spoofing8.1 HighN/A0%Jan 10, 2026
1376-1400 of 4466
‹›