The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-15445: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Jul 16, 2026
CVE-2026-15013: Improper Verification of Cryptographic Signature9.8 CriticalN/A2%Jul 16, 2026
CVE-2026-13005: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Jul 16, 2026
CVE-2026-12409: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jul 16, 2026
CVE-2026-55445: Improper AuthenticationN/A9.3 Critical1%Jul 15, 2026
CVE-2026-54458: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A1%Jul 15, 2026
CVE-2026-53446: Server-Side Request Forgery (SSRF)N/A6.2 Medium0%Jul 15, 2026
CVE-2026-50183: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Jul 15, 2026
CVE-2026-50182: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 15, 2026
CVE-2026-33684: Missing Authorization5.3 MediumN/A0%Jul 15, 2026
CVE-2026-40957: Improper Restriction of Rendered UI Layers or Frames7.5 High6.1 Medium0%Jul 15, 2026
CVE-2026-40953: Out-of-bounds Write4.4 Medium6.7 Medium0%Jul 15, 2026
CVE-2026-40952: Incorrect Default Permissions7.8 High8.5 High0%Jul 15, 2026
CVE-2026-62378: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A0%Jul 15, 2026
CVE-2026-20146: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A0%Jul 15, 2026
CVE-2026-57996: Improper Privilege Management8.8 High8.7 High0%Jul 15, 2026
CVE-2026-12281: Improper Authentication8.1 HighN/A0%Jul 15, 2026
CVE-2026-15030: Out-of-bounds ReadN/A5.6 Medium0%Jul 15, 2026
CVE-2026-15029: Untrusted Pointer DereferenceN/A8.4 High0%Jul 15, 2026
CVE-2026-13585: Allocation of Resources Without Limits or ThrottlingN/A8.2 High0%Jul 15, 2026
CVE-2026-48321: Incorrect Authorization9.3 CriticalN/A0%Jul 14, 2026
CVE-2026-48320: Improper Neutralization of Input During Web Page Generation8.5 HighN/A0%Jul 14, 2026
CVE-2026-48284: Improper Input Validation9.6 CriticalN/A0%Jul 14, 2026
CVE-2026-15410: Improper Control of Generation of Code7.2 HighN/A12%Jul 14, 2026
CVE-2026-15429: Improper Neutralization of CRLF Sequences8.8 High5.1 Medium1%Jul 14, 2026
2426-2450 of 17480
‹›