The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-72555: Improper Access Control8.1 HighN/A0%Aug 11, 2026
CVE-2026-72553: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 11, 2026
CVE-2026-72541: Missing Authentication for Critical Function6.5 MediumN/A0%Aug 11, 2026
CVE-2026-72534: Improper Privilege Management8.8 HighN/A0%Aug 11, 2026
CVE-2026-33922: Improper Limitation of a Pathname to a Restricted Directory6.0 Medium6.8 Medium0%Aug 11, 2026
CVE-2026-33921: Initialization of a Resource with an Insecure Default5.2 Medium4.8 Medium0%Aug 11, 2026
CVE-2026-73159: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 11, 2026
CVE-2026-73158: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 11, 2026
CVE-2026-73140: Missing AuthorizationN/A5.3 Medium0%Aug 11, 2026
CVE-2026-4757: Incorrect Permission Assignment for Critical Resource7.2 HighN/A0%Aug 11, 2026
CVE-2026-14548: Missing Authorization6.5 MediumN/A0%Aug 11, 2026
CVE-2026-11985: Exposure of Sensitive Information to an Unauthorized Actor3.6 LowN/A0%Aug 11, 2026
CVE-2026-24329: XML Injection (aka Blind XPath Injection)4.9 MediumN/A0%Aug 11, 2026
CVE-2026-66772: Missing Authorization4.3 MediumN/A0%Aug 11, 2026
CVE-2025-30238: Incorrect AuthorizationN/A8.6 High0%Aug 10, 2026
CVE-2026-72917: Incorrect Behavior Order: Validate Before Canonicalize5.9 MediumN/A0%Aug 10, 2026
CVE-2026-72914: Asymmetric Resource Consumption (Amplification)7.5 HighN/A0%Aug 10, 2026
CVE-2025-32736: Cross-Site Request Forgery (CSRF)N/A4.9 Medium0%Aug 10, 2026
CVE-2026-18949: Execution with Unnecessary Privileges8.8 HighN/A0%Aug 10, 2026
CVE-2026-18942: Improper Control of Generation of Code5.5 MediumN/A0%Aug 10, 2026
CVE-2026-18608: Execution with Unnecessary Privileges8.7 HighN/A0%Aug 10, 2026
CVE-2026-72881: Improper Neutralization of Special Elements used in an OS CommandN/A6.4 Medium0%Aug 10, 2026
CVE-2025-13293: Use of Hard-coded CredentialsN/A9.3 Critical0%Aug 10, 2026
CVE-2026-73033: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium7.0 High1%Aug 10, 2026
CVE-2026-12339: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.9 Medium0%Aug 10, 2026
1851-1875 of 17433
‹›