The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-31942: Missing Authorization7.1 HighN/A0%Jun 2, 2026
CVE-2026-10702: Access of Resource Using Incompatible Type4.3 MediumN/A1%Jun 2, 2026
CVE-2025-64390: Time-of-check Time-of-use (TOCTOU) Race Condition7.4 HighN/A0%Jun 2, 2026
CVE-2026-45683: Buffer Under-read3.8 LowN/A0%Jun 2, 2026
CVE-2026-45682: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Jun 2, 2026
CVE-2026-32250: Improper Neutralization of Input During Web Page Generation4.3 MediumN/A0%Jun 2, 2026
CVE-2026-34907: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Jun 2, 2026
CVE-2026-10567: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Jun 2, 2026
CVE-2026-10510: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 2, 2026
CVE-2026-10550: Improper Neutralization of Special Elements used in a Command6.3 Medium2.1 Low1%Jun 2, 2026
CVE-2026-10529: Improper Neutralization of Input During Web Page Generation2.4 Low1.9 Low0%Jun 2, 2026
CVE-2026-10514: Improper Neutralization of Input During Web Page Generation2.4 Low1.9 Low0%Jun 2, 2026
CVE-2026-24754: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 1, 2026
CVE-2026-24752: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Jun 1, 2026
CVE-2026-28586: Improper Privilege Management3.3 LowN/A0%Jun 1, 2026
CVE-2026-28581: NULL Pointer Dereference4.0 MediumN/A0%Jun 1, 2026
CVE-2026-28578: Improper Input Validation5.5 MediumN/A0%Jun 1, 2026
CVE-2026-28577: Improper Restriction of Rendered UI Layers or Frames7.8 HighN/A0%Jun 1, 2026
CVE-2026-0099: Improper Check for Dropped Privileges7.8 HighN/A0%Jun 1, 2026
CVE-2026-0098: Unintended Proxy or Intermediary7.8 HighN/A0%Jun 1, 2026
CVE-2026-0096: User Interface (UI) Misrepresentation of Critical Information7.8 HighN/A0%Jun 1, 2026
CVE-2026-0094: User Interface (UI) Misrepresentation of Critical Information7.8 HighN/A0%Jun 1, 2026
CVE-2026-0089: Improper Privilege Management7.8 HighN/A0%Jun 1, 2026
CVE-2026-0088: User Interface (UI) Misrepresentation of Critical Information7.8 HighN/A0%Jun 1, 2026
CVE-2026-0087: Protection Mechanism Failure7.8 HighN/A0%Jun 1, 2026
2401-2425 of 16397
‹›