The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-72389: Undefined Security Weakness7.8 HighN/A0%Aug 15, 2026
CVE-2026-72151: Undefined Security Weakness8.4 HighN/A0%Aug 15, 2026
CVE-2026-72049: Undefined Security Weakness7.1 HighN/A0%Aug 15, 2026
CVE-2026-18216: Improper Authentication6.5 MediumN/A1%Aug 15, 2026
CVE-2026-14230: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 15, 2026
CVE-2026-15453: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Aug 15, 2026
CVE-2026-13360: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 15, 2026
CVE-2026-15341: Improper Authentication9.8 CriticalN/A1%Aug 15, 2026
CVE-2026-15312: Improper Privilege Management8.8 HighN/A1%Aug 15, 2026
CVE-2026-15303: Improper Authentication9.8 CriticalN/A1%Aug 15, 2026
CVE-2026-15001: Improper Privilege Management8.8 HighN/A1%Aug 15, 2026
CVE-2026-74244: Improper Verification of Cryptographic Signature7.5 HighN/A0%Aug 14, 2026
CVE-2026-74242: Authorization Bypass Through User-Controlled Key4.4 MediumN/A0%Aug 14, 2026
CVE-2026-73679: Improper Control of Generation of Code7.2 High8.6 High1%Aug 14, 2026
CVE-2026-73849: Missing Authentication for Critical Function9.8 CriticalN/A1%Aug 14, 2026
CVE-2026-73847: Cross-Site Request Forgery (CSRF)6.8 MediumN/A0%Aug 14, 2026
CVE-2026-19639: Improper Validation of Specified Quantity in Input4.3 Medium5.3 Medium0%Aug 14, 2026
CVE-2026-19631: Improper Neutralization of Special Elements used in an SQL Command4.9 Medium6.9 Medium0%Aug 14, 2026
CVE-2026-12366: Use After Free8.8 HighN/A0%Aug 14, 2026
CVE-2026-19628: Improper Neutralization of Special Elements used in an OS Command7.2 High8.6 High2%Aug 14, 2026
CVE-2026-19626: Improper Neutralization of Directives in Dynamically Evaluated Code9.9 Critical9.4 Critical2%Aug 14, 2026
CVE-2026-16772: Improper Privilege Management8.1 HighN/A0%Aug 14, 2026
CVE-2026-72835: Improper Resolution of Path Equivalence6.8 Medium7.6 High1%Aug 14, 2026
CVE-2026-72831: Incorrect Authorization8.8 High8.7 High1%Aug 14, 2026
CVE-2026-72829: Improper Privilege Management8.8 High8.7 High0%Aug 14, 2026
1701-1725 of 17414
‹›