The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-7252: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A1%May 7, 2026
CVE-2026-72524: Incorrect Authorization8.8 HighN/A0%Sep 14, 2026
CVE-2026-72529: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Aug 19, 2026
CVE-2026-72526: Unintended Proxy or Intermediary9.9 CriticalN/A1%Aug 12, 2026
CVE-2026-72522: Out-of-bounds Read6.2 MediumN/A0%Aug 10, 2026