The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-15459: Improper Authentication8.1 HighN/A1%Aug 6, 2026
CVE-2026-16636: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 6, 2026
CVE-2026-8470: Use of a Broken or Risky Cryptographic Algorithm9.1 CriticalN/A0%Aug 5, 2026
CVE-2026-70443: Improper Privilege Management4.3 MediumN/A0%Aug 5, 2026
CVE-2026-70430: Improper Access Control2.7 LowN/A0%Aug 5, 2026
CVE-2026-10716: Improper Neutralization of Special Elements used in an SQL CommandN/A7.5 High0%Aug 5, 2026
CVE-2026-9195: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Aug 5, 2026
CVE-2026-9192: Improper Authentication9.8 CriticalN/A1%Aug 5, 2026
CVE-2026-7557: Improper Verification of Cryptographic Signature9.1 CriticalN/A0%Aug 5, 2026
CVE-2026-7329: Improper Privilege Management9.9 CriticalN/A1%Aug 5, 2026
CVE-2026-7327: Improper Privilege Management8.1 HighN/A0%Aug 5, 2026
CVE-2026-7326: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Aug 5, 2026
CVE-2026-60053: Insufficient Session Expiration9.1 CriticalN/A0%Aug 5, 2026
CVE-2026-39924: Insufficient Session Expiration6.8 Medium7.6 High0%Aug 5, 2026
CVE-2026-15587: Origin Validation ErrorN/A9.4 Critical0%Aug 5, 2026
CVE-2026-15572: Access of Resource Using Incompatible Type8.8 HighN/A1%Aug 5, 2026
CVE-2026-16102: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization8.1 HighN/A0%Aug 5, 2026
CVE-2026-15573: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization8.1 HighN/A0%Aug 5, 2026
CVE-2026-16071: Improper Neutralization of Special Elements used in an LDAP Query5.4 MediumN/A0%Aug 5, 2026
CVE-2026-17578: Reusing a Nonce, Key Pair in EncryptionN/A2.3 Low0%Aug 5, 2026
CVE-2026-12609: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Aug 5, 2026
CVE-2026-44945: Unintended Proxy or Intermediary9.1 CriticalN/A1%Aug 5, 2026
CVE-2026-10059: Incorrect Privilege Assignment9.1 CriticalN/A0%Aug 5, 2026
CVE-2026-7693: Improper Neutralization of Special Elements used in a Command7.2 HighN/A2%Aug 5, 2026
CVE-2026-7444: Cross-Site Request Forgery (CSRF)8.1 HighN/A0%Aug 5, 2026
1951-1975 of 17435
‹›