The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-77120: Improper Neutralization of Special Elements used in an OS CommandN/A8.7 High1%Sep 9, 2026
CVE-2026-78635: Improper Neutralization of Argument Delimiters in a Command5.0 MediumN/A0%Sep 8, 2026
CVE-2026-78550: Improper Neutralization of Directives in Dynamically Evaluated Code7.2 HighN/A0%Sep 8, 2026
CVE-2026-82533: Reliance on Untrusted Inputs in a Security Decision9.6 Critical9.4 Critical1%Sep 8, 2026
CVE-2026-69397: Use After Free7.5 HighN/A1%Sep 8, 2026
CVE-2026-86541: Improper Limitation of a Pathname to a Restricted Directory8.3 High7.2 High1%Sep 7, 2026
CVE-2026-80238: Execution with Unnecessary Privileges9.3 CriticalN/A0%Sep 7, 2026
CVE-2026-86060: Improper Neutralization of Argument Delimiters in a Command9.8 Critical9.2 Critical6%Sep 5, 2026
CVE-2026-67279: Improper Enforcement of Behavioral Workflow6.5 Medium6.9 Medium2%Sep 5, 2026
CVE-2026-67278: Improper Verification of Cryptographic Signature9.1 Critical6.3 Medium0%Sep 5, 2026
CVE-2026-67276: Improper Verification of Cryptographic Signature8.1 High9.2 Critical9%Sep 5, 2026
CVE-2026-18858: Privilege Defined With Unsafe Actions5.5 MediumN/A0%Sep 4, 2026
CVE-2026-85146: Use of Hard-coded Credentials9.8 Critical9.3 Critical1%Sep 4, 2026
CVE-2026-75754: Missing Authentication for Critical FunctionN/A10.0 Critical0%Sep 4, 2026
CVE-2026-85394: Improper Verification of Cryptographic Signature9.1 Critical9.3 Critical0%Sep 3, 2026
CVE-2026-78662: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Sep 2, 2026
CVE-2026-56855: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Sep 2, 2026
CVE-2026-53611: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A2%Sep 2, 2026
CVE-2026-84694: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High1%Sep 2, 2026
CVE-2026-84308: Observable Timing Discrepancy6.3 MediumN/A0%Sep 1, 2026
CVE-2026-76658: Improper Authentication10.0 CriticalN/A1%Sep 1, 2026
CVE-2026-84194: Improper Neutralization of Special Elements used in an OS CommandN/A8.6 High2%Sep 1, 2026
CVE-2026-82217: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Aug 31, 2026
CVE-2026-82673: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.3 High1%Aug 31, 2026
CVE-2026-56854: Incorrect Authorization7.5 HighN/A0%Aug 28, 2026
201-225 of 2138
‹›