The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-10058: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%May 29, 2026
CVE-2026-10057: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%May 29, 2026
CVE-2026-8732: Missing Authentication for Critical Function9.8 CriticalN/A2%May 29, 2026
CVE-2026-6275: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%May 29, 2026
CVE-2026-7430: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%May 29, 2026
CVE-2026-45343: Improper Neutralization of Input During Web Page GenerationN/A8.5 High0%May 28, 2026
CVE-2026-9645: Improper Neutralization of Special Elements used in an OS Command9.9 CriticalN/A1%May 28, 2026
CVE-2026-44657: Improper Neutralization of Input During Web Page GenerationN/A7.5 High1%May 28, 2026
CVE-2026-46509: Improperly Controlled Modification of Object Prototype Attributes8.2 HighN/A0%May 28, 2026
CVE-2026-45348: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%May 28, 2026
CVE-2026-45323: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A0%May 28, 2026
CVE-2026-43898: Improper Control of Generation of Code10.0 CriticalN/A1%May 28, 2026
CVE-2026-47676: Inconsistent Interpretation of HTTP Requests5.3 MediumN/A0%May 28, 2026
CVE-2026-47675: Improper Neutralization of CRLF Sequences in HTTP Headers5.3 MediumN/A0%May 28, 2026
CVE-2026-47674: Incorrect Regular Expression5.3 MediumN/A0%May 28, 2026
CVE-2026-47673: Improper Authorization6.5 MediumN/A0%May 28, 2026
CVE-2026-45292: Allocation of Resources Without Limits or Throttling5.3 MediumN/A1%May 28, 2026
CVE-2026-47760: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 28, 2026
CVE-2026-9828: Deserialization of Untrusted DataN/A2.9 Low1%May 28, 2026
CVE-2026-37579: Deserialization of Untrusted Data7.3 HighN/A0%May 28, 2026
CVE-2026-9806: Improper Neutralization of Input During Web Page GenerationN/A6.3 Medium0%May 28, 2026
CVE-2026-7797: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A1%May 28, 2026
CVE-2026-9801: Improper Validation of Specified Quantity in Input4.9 MediumN/A1%May 28, 2026
CVE-2026-5737: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%May 28, 2026
CVE-2026-42877: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 27, 2026
2476-2500 of 16403
‹›