The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-14990: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%Oct 8, 2026
CVE-2026-104646: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Oct 8, 2026
CVE-2026-107285: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Oct 7, 2026
CVE-2026-107284: Insufficient Verification of Data Authenticity3.7 LowN/A0%Oct 7, 2026
CVE-2026-107283: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)3.7 LowN/A0%Oct 7, 2026
CVE-2026-107282: Cleartext Transmission of Sensitive InformationN/A9.4 Critical0%Oct 7, 2026
CVE-2026-107281: Origin Validation ErrorN/A7.6 High0%Oct 7, 2026
CVE-2026-107280: Sensitive Cookie with Improper SameSite AttributeN/A6.9 Medium0%Oct 7, 2026
CVE-2026-107279: Incorrect Implementation of Authentication AlgorithmN/A8.8 High0%Oct 7, 2026
CVE-2026-107232: Cleartext Transmission of Sensitive Information7.5 HighN/A0%Oct 7, 2026
CVE-2026-107231: Cleartext Transmission of Sensitive InformationN/A8.7 High0%Oct 7, 2026
CVE-2026-107230: Origin Validation Error7.4 HighN/A0%Oct 7, 2026
CVE-2026-76276: Initialization of a Resource with an Insecure Default4.3 MediumN/A0%Oct 7, 2026
CVE-2026-107229: Session Fixation4.0 MediumN/A0%Oct 7, 2026
CVE-2026-107228: Improper Authentication6.8 MediumN/A0%Oct 7, 2026
CVE-2026-107227: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 7, 2026
CVE-2025-70519: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 7, 2026
CVE-2025-70515: Undefined Security WeaknessN/AN/A0%Oct 7, 2026
CVE-2026-102258: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 7, 2026
CVE-2026-93684: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 7, 2026
CVE-2026-87971: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 7, 2026
CVE-2026-96594: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 6, 2026
CVE-2026-106550: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 6, 2026
CVE-2026-106453: Memory Allocation with Excessive Size Value5.3 MediumN/A0%Oct 6, 2026
CVE-2026-106452: Memory Allocation with Excessive Size Value5.3 MediumN/A0%Oct 6, 2026
226-250 of 16382
‹›