The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-29896: NULL Pointer DereferenceN/A2.3 Low0%Oct 15, 2026
CVE-2025-29895: NULL Pointer DereferenceN/A2.3 Low0%Oct 15, 2026
CVE-2026-41544: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.7 High0%Oct 15, 2026
CVE-2026-88043: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 15, 2026
CVE-2026-86803: Improper Control of Generation of Code6.5 MediumN/A0%Oct 15, 2026
CVE-2026-78087: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2026
CVE-2026-78001: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2026
CVE-2026-18586: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 15, 2026
CVE-2026-18557: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 15, 2026
CVE-2026-18548: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 15, 2026
CVE-2026-17031: Missing Authorization8.1 HighN/A0%Oct 15, 2026
CVE-2026-17001: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2026
CVE-2026-15180: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 15, 2026
CVE-2026-15090: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Oct 15, 2026
CVE-2026-110926: Observable Discrepancy5.3 MediumN/A0%Oct 15, 2026
CVE-2026-110925: Improper Neutralization of Special Elements used in an OS Command5.4 MediumN/A0%Oct 15, 2026
CVE-2026-110923: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Oct 15, 2026
CVE-2026-76667: Out-of-bounds Read5.7 MediumN/A0%Oct 15, 2026
CVE-2026-76666: Out-of-bounds Read4.7 MediumN/A0%Oct 15, 2026
CVE-2026-76665: Out-of-bounds Read7.1 HighN/A0%Oct 15, 2026
CVE-2026-3712: Server-Side Request Forgery (SSRF)7.3 HighN/A0%Oct 15, 2026
CVE-2026-14572: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2026
CVE-2026-108587: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Oct 15, 2026
CVE-2026-93484: Improper Neutralization of Special Elements used in an SQL CommandN/A8.6 High0%Oct 15, 2026
CVE-2026-76664: Out-of-bounds Read6.4 MediumN/A0%Oct 15, 2026
2001-2025 of 409174
‹›