The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-9214: Improper Input Validation4.5 Medium4.3 Medium0%Aug 11, 2026
CVE-2026-73069: Improper Neutralization of Special Elements used in an SQL Command9.1 CriticalN/A1%Aug 11, 2026
CVE-2026-56721: Authorization Bypass Through User-Controlled Key8.8 High8.7 High1%Aug 11, 2026
CVE-2026-56720: Missing Authorization4.3 Medium5.3 Medium0%Aug 11, 2026
CVE-2026-11738: Improper Input Validation4.4 Medium4.3 Medium0%Aug 11, 2026
CVE-2026-11737: Improper Input Validation4.5 Medium4.3 Medium0%Aug 11, 2026
CVE-2026-11733: Stack-based Buffer Overflow4.9 Medium1.1 Low0%Aug 11, 2026
CVE-2026-72920: Missing Authentication for Critical Function9.8 CriticalN/A1%Aug 11, 2026
CVE-2026-18860: Improper Handling of Insufficient Permissions or Privileges8.7 HighN/A0%Aug 11, 2026
CVE-2026-18635: Incorrect Authorization7.2 HighN/A0%Aug 11, 2026
CVE-2026-72779: Incomplete List of Disallowed Inputs4.5 Medium8.7 High0%Aug 11, 2026
CVE-2026-72747: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%Aug 11, 2026
CVE-2026-18972: Authentication Bypass by Spoofing9.6 CriticalN/A0%Aug 11, 2026
CVE-2026-72604: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Aug 11, 2026
CVE-2026-72599: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Aug 11, 2026
CVE-2026-72561: Improper Access Control8.8 HighN/A0%Aug 11, 2026
CVE-2026-72559: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 11, 2026
CVE-2026-72555: Improper Access Control8.1 HighN/A0%Aug 11, 2026
CVE-2026-72553: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 11, 2026
CVE-2026-72541: Missing Authentication for Critical Function6.5 MediumN/A0%Aug 11, 2026
CVE-2026-72534: Improper Privilege Management8.8 HighN/A0%Aug 11, 2026
CVE-2026-33922: Improper Limitation of a Pathname to a Restricted Directory6.0 Medium6.8 Medium0%Aug 11, 2026
CVE-2026-33921: Initialization of a Resource with an Insecure Default5.2 Medium4.8 Medium0%Aug 11, 2026
CVE-2026-73159: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 11, 2026
CVE-2026-73158: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 11, 2026
1826-1850 of 17425
‹›