The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-16032: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 9, 2026
CVE-2026-15038: Improper Authentication9.8 CriticalN/A0%Aug 9, 2026
CVE-2026-71502: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium1%Aug 8, 2026
CVE-2026-16955: Improper Limitation of a Pathname to a Restricted Directory5.0 MediumN/A0%Aug 8, 2026
CVE-2026-14526: Improper Privilege Management9.8 CriticalN/A1%Aug 8, 2026
CVE-2026-11425: Improper Neutralization of Input During Web Page Generation4.4 Medium2.0 Low0%Aug 7, 2026
CVE-2026-64637: Improper Privilege Management9.9 CriticalN/A0%Aug 7, 2026
CVE-2026-17601: Missing Authorization7.2 High8.9 High0%Aug 7, 2026
CVE-2026-17599: Unverified Password Change7.2 High6.9 Medium0%Aug 7, 2026
CVE-2026-17598: Improperly Controlled Modification of Dynamically-Determined Object Attributes4.9 Medium5.3 Medium0%Aug 7, 2026
CVE-2026-17593: Use of Externally-Controlled Input to Select Classes or Code7.2 High7.2 High0%Aug 7, 2026
CVE-2026-14644: Access of Resource Using Incompatible Type7.2 High8.6 High0%Aug 7, 2026
CVE-2026-48093: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 7, 2026
CVE-2026-19264: Improper Limitation of a Pathname to a Restricted Directory9.8 Critical9.3 Critical1%Aug 7, 2026
CVE-2026-66494: Improper Access ControlN/A8.7 High0%Aug 7, 2026
CVE-2026-56794: Relative Path Traversal6.5 MediumN/A0%Aug 7, 2026
CVE-2026-56793: Improper Authentication9.8 CriticalN/A0%Aug 7, 2026
CVE-2026-54213: Improper Access ControlN/A9.2 Critical1%Aug 7, 2026
CVE-2026-16027: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Aug 7, 2026
CVE-2026-16030: Improper Authentication8.1 HighN/A0%Aug 7, 2026
CVE-2026-15386: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 7, 2026
CVE-2026-15359: Missing Authorization6.5 MediumN/A0%Aug 7, 2026
CVE-2026-15032: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 7, 2026
CVE-2026-14365: Missing Authorization9.8 CriticalN/A0%Aug 7, 2026
CVE-2026-14364: Weak Password Recovery Mechanism for Forgotten Password9.8 CriticalN/A0%Aug 7, 2026
1901-1925 of 17433
‹›