The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-27897: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 12, 2026
CVE-2025-27896: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 12, 2026
CVE-2025-27895: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 12, 2026
CVE-2026-78404: Improper Privilege Management6.5 MediumN/A0%Oct 12, 2026
CVE-2026-18166: Improper Access Control7.7 HighN/A0%Oct 12, 2026
CVE-2026-105466: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Oct 12, 2026
CVE-2026-105465: Improper Privilege Management8.8 HighN/A0%Oct 12, 2026
CVE-2026-105464: Improper Privilege Management8.8 HighN/A0%Oct 12, 2026
CVE-2026-108577: Uncontrolled Resource Consumption4.3 Medium2.1 Low0%Oct 11, 2026
CVE-2026-107819: Improper Validation of Certificate with Host Mismatch5.9 MediumN/A0%Oct 9, 2026
CVE-2026-87980: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Oct 8, 2026
CVE-2026-84891: Use of Hard-coded Credentials7.5 HighN/A0%Oct 8, 2026
CVE-2026-84875: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A0%Oct 8, 2026
CVE-2026-84249: Missing Authentication for Critical Function9.8 CriticalN/A0%Oct 8, 2026
CVE-2026-84247: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Oct 8, 2026
CVE-2026-84246: Buffer Copy without Checking Size of Input9.8 CriticalN/A0%Oct 8, 2026
CVE-2026-84230: Concurrent Execution using Shared Resource with Improper Synchronization5.9 MediumN/A0%Oct 8, 2026
CVE-2026-84209: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Oct 8, 2026
CVE-2026-84198: Buffer Copy without Checking Size of Input9.8 CriticalN/A0%Oct 8, 2026
CVE-2026-84058: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A0%Oct 8, 2026
CVE-2026-84057: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A0%Oct 8, 2026
CVE-2026-84035: Stack-based Buffer Overflow9.8 CriticalN/A0%Oct 8, 2026
CVE-2026-84032: Improper Certificate Validation8.1 HighN/A0%Oct 8, 2026
CVE-2026-82900: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A0%Oct 8, 2026
CVE-2026-82895: Buffer Copy without Checking Size of Input9.8 CriticalN/A0%Oct 8, 2026
151-175 of 9776
‹›