The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-46361: Improper Neutralization of Input During Web Page Generation6.9 Medium8.2 High0%May 15, 2026
CVE-2026-46360: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%May 15, 2026
CVE-2026-45622: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%May 15, 2026
CVE-2021-47968: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 15, 2026
CVE-2021-47967: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%May 15, 2026
CVE-2021-47963: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%May 15, 2026
CVE-2021-47962: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 15, 2026
CVE-2026-44714: Improper Verification of Cryptographic Signature7.5 HighN/A0%May 15, 2026
CVE-2026-41258: Improper Control of Generation of Code9.1 CriticalN/A1%May 15, 2026
CVE-2026-23695: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%May 15, 2026
CVE-2026-46508: Improper Neutralization of Special Elements used in a Command7.8 High8.4 High0%May 15, 2026
CVE-2026-45773: Cross-Site Request Forgery (CSRF)6.5 Medium5.1 Medium0%May 15, 2026
CVE-2026-45772: Untrusted Search Path9.8 Critical0.0 None1%May 15, 2026
CVE-2026-35194: Improper Control of Generation of Code8.1 HighN/A1%May 15, 2026
CVE-2026-41553: Improper Neutralization of Special Elements used in an OS Command10.0 Critical10.0 Critical1%May 15, 2026
CVE-2026-6415: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%May 15, 2026
CVE-2026-44633: Incorrect Authorization8.1 HighN/A0%May 14, 2026
CVE-2026-22707: Unrestricted Upload of File with Dangerous Type5.4 Medium5.3 Medium0%May 14, 2026
CVE-2026-42555: Improper Control of Generation of Code9.1 CriticalN/A1%May 14, 2026
CVE-2026-44503: URL Redirection to Untrusted SiteN/A7.0 High1%May 14, 2026
CVE-2026-44501: Deserialization of Untrusted Data7.1 HighN/A0%May 14, 2026
CVE-2026-44371: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%May 14, 2026
CVE-2026-1630: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%May 14, 2026
CVE-2026-7481: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 14, 2026
CVE-2026-7377: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 14, 2026
2626-2650 of 16411
‹›