The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-16063: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 2, 2026
CVE-2026-15385: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 2, 2026
CVE-2026-15206: Improper Authentication7.5 HighN/A0%Aug 2, 2026
CVE-2026-14864: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 2, 2026
CVE-2026-12586: Improper Authentication8.1 HighN/A0%Aug 2, 2026
CVE-2026-8457: Authentication Bypass by Alternate Name9.8 CriticalN/A0%Aug 2, 2026
CVE-2026-67352: Improper Neutralization of Input During Web Page Generation7.6 High6.8 Medium0%Aug 1, 2026
CVE-2026-67343: Exposure of Sensitive Information to an Unauthorized Actor8.8 High8.7 High0%Aug 1, 2026
CVE-2026-67341: Incorrect Authorization9.8 Critical9.3 Critical0%Aug 1, 2026
CVE-2026-67310: Incorrect Authorization5.4 Medium5.3 Medium0%Aug 1, 2026
CVE-2026-17605: Improper Control of Filename for Include/Require Statement in PHP Program6.6 MediumN/A1%Aug 1, 2026
CVE-2026-17555: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Aug 1, 2026
CVE-2026-16635: Improper Privilege Management8.8 HighN/A0%Aug 1, 2026
CVE-2026-16614: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Aug 1, 2026
CVE-2026-15964: Unverified Password Change9.8 CriticalN/A0%Aug 1, 2026
CVE-2026-15951: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Aug 1, 2026
CVE-2026-15988: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Aug 1, 2026
CVE-2025-14469: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Aug 1, 2026
CVE-2026-15368: Improper Privilege Management8.1 HighN/A0%Aug 1, 2026
CVE-2026-15234: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 1, 2026
CVE-2026-14836: Improper Authentication8.1 HighN/A0%Aug 1, 2026
CVE-2026-14561: Improper Authentication6.5 MediumN/A0%Aug 1, 2026
CVE-2026-14309: Improper Authentication8.1 HighN/A0%Aug 1, 2026
CVE-2026-13729: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Aug 1, 2026
CVE-2026-13604: Server-Side Request Forgery (SSRF)5.3 MediumN/A0%Aug 1, 2026
2076-2100 of 17456
‹›