The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-44845: Improper Neutralization of Special Elements Used in a Template Engine6.7 MediumN/A1%Aug 17, 2026
CVE-2026-75103: Authorization Bypass Through User-Controlled Key8.8 High8.7 High0%Aug 17, 2026
CVE-2026-71472: Improper Neutralization of Special Elements used in an OS Command9.1 CriticalN/A1%Aug 17, 2026
CVE-2026-62982: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Aug 17, 2026
CVE-2026-68518: Improper Neutralization of Special Elements used in an OS CommandN/A8.8 High0%Aug 17, 2026
CVE-2026-12629: Loop with Unreachable Exit Condition4.6 MediumN/A0%Aug 17, 2026
CVE-2026-64866: Missing AuthorizationN/A5.1 Medium0%Aug 17, 2026
CVE-2026-64859: Exposure of Sensitive Information to an Unauthorized Actor9.1 CriticalN/A1%Aug 17, 2026
CVE-2026-16048: Incorrect Authorization6.3 MediumN/A0%Aug 17, 2026
CVE-2026-15754: Incorrect Authorization4.2 MediumN/A0%Aug 17, 2026
CVE-2026-16139: Improper Limitation of a Pathname to a Restricted Directory7.2 HighN/A1%Aug 17, 2026
CVE-2026-15218: Incorrect Privilege Assignment7.9 HighN/A1%Aug 17, 2026
CVE-2026-74801: Improper Neutralization of Special Elements used in an OS Command8.2 High8.6 High0%Aug 17, 2026
CVE-2026-74900: Unchecked Error Condition9.8 Critical9.3 Critical1%Aug 17, 2026
CVE-2026-50602: Incorrect Permission Assignment for Critical ResourceN/A8.5 High0%Aug 17, 2026
CVE-2026-50601: Use of Hard-coded CredentialsN/A6.6 Medium0%Aug 17, 2026
CVE-2026-73056: Improper Restriction of Excessive Authentication Attempts9.8 Critical9.3 Critical1%Aug 16, 2026
CVE-2026-18347: Missing Authorization4.3 MediumN/A1%Aug 16, 2026
CVE-2026-17608: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Aug 16, 2026
CVE-2026-13424: Improper Neutralization of Input During Web Page Generation7.2 HighN/A1%Aug 16, 2026
CVE-2026-2283: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Aug 16, 2026
CVE-2026-19714: Improper Authentication9.1 CriticalN/A0%Aug 16, 2026
CVE-2026-19712: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 16, 2026
CVE-2026-19711: Improper Access Control6.5 MediumN/A0%Aug 16, 2026
CVE-2026-18653: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Aug 16, 2026
1651-1675 of 17413
‹›