The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-73429: Incorrect Type Conversion or Cast5.3 MediumN/A1%Aug 12, 2026
CVE-2026-73331: Improper Neutralization of Special Elements used in an SQL Command7.1 High7.1 High0%Aug 12, 2026
CVE-2026-73330: Improper Neutralization of Special Elements Used in a Template Engine6.6 Medium7.5 High1%Aug 12, 2026
CVE-2026-73329: Improper Neutralization of Input During Web Page Generation8.7 High9.2 Critical0%Aug 12, 2026
CVE-2026-73326: Missing Authorization7.6 High7.2 High0%Aug 12, 2026
CVE-2026-72809: Authentication Bypass by Spoofing8.0 High7.1 High0%Aug 12, 2026
CVE-2026-72794: Insufficiently Protected Credentials8.6 High9.2 Critical0%Aug 12, 2026
CVE-2026-72793: Insufficiently Protected Credentials8.6 High9.2 Critical0%Aug 12, 2026
CVE-2026-72788: Incorrect Authorization5.8 Medium6.9 Medium0%Aug 12, 2026
CVE-2026-72786: Improper Authorization6.5 Medium7.1 High0%Aug 12, 2026
CVE-2026-63299: Allocation of Resources Without Limits or Throttling9.9 CriticalN/A1%Aug 12, 2026
CVE-2026-12618: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.2 HighN/A1%Aug 12, 2026
CVE-2026-73301: Missing Authorization4.3 MediumN/A0%Aug 12, 2026
CVE-2026-49467: Incorrect Implementation of Authentication Algorithm8.8 HighN/A1%Aug 12, 2026
CVE-2026-73292: Cross-Site Request Forgery (CSRF)8.3 HighN/A0%Aug 12, 2026
CVE-2026-65017: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A1%Aug 12, 2026
CVE-2026-64639: Incorrect Privilege AssignmentN/A9.3 Critical1%Aug 12, 2026
CVE-2026-73432: Server-Side Request Forgery (SSRF)N/A5.1 Medium0%Aug 12, 2026
CVE-2026-68752: Improper Privilege Management7.2 HighN/A0%Aug 12, 2026
CVE-2026-50561: Improper Authentication9.4 CriticalN/A1%Aug 12, 2026
CVE-2026-49262: Time-of-check Time-of-use (TOCTOU) Race Condition3.0 LowN/A0%Aug 12, 2026
CVE-2026-47233: Missing Authorization6.5 MediumN/A0%Aug 12, 2026
CVE-2026-47232: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Aug 12, 2026
CVE-2026-47229: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Aug 12, 2026
CVE-2026-47228: Cross-Site Request Forgery (CSRF)5.2 MediumN/A0%Aug 12, 2026
1776-1800 of 17425
‹›