The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-44289: Uncontrolled Recursion7.5 HighN/A1%May 13, 2026
CVE-2026-44288: Improper Handling of Unicode Encoding5.3 MediumN/A0%May 13, 2026
CVE-2020-37225: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 13, 2026
CVE-2020-37222: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%May 13, 2026
CVE-2020-37174: Improper Neutralization of Input During Web Page Generation5.5 Medium4.8 Medium0%May 13, 2026
CVE-2026-44459: Improper Validation of Specified Quantity in Input3.8 LowN/A0%May 13, 2026
CVE-2026-37430: Unrestricted Upload of File with Dangerous Type7.3 HighN/A0%May 13, 2026
CVE-2026-6177: Improper Neutralization of Input During Web Page Generation7.2 HighN/A1%May 13, 2026
CVE-2026-8336: Use After Free6.5 Medium7.7 High0%May 13, 2026
CVE-2026-41901: Improper Neutralization of Special Elements used in an Expression Language Statement9.0 CriticalN/A1%May 12, 2026
CVE-2026-44259: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)4.6 MediumN/A0%May 12, 2026
CVE-2026-44242: Uncontrolled Resource Consumption3.7 LowN/A0%May 12, 2026
CVE-2026-44241: Uncontrolled Resource Consumption7.5 HighN/A1%May 12, 2026
CVE-2026-44225: Improper Limitation of a Pathname to a Restricted Directory9.3 CriticalN/A1%May 12, 2026
CVE-2026-42338: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium1%May 12, 2026
CVE-2026-34686: Improper Neutralization of Input During Web Page Generation8.7 HighN/A1%May 12, 2026
CVE-2026-34658: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%May 12, 2026
CVE-2026-34655: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%May 12, 2026
CVE-2026-23819: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%May 12, 2026
CVE-2026-33117: Improper Authentication9.1 CriticalN/A0%May 12, 2026
CVE-2025-70842: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 12, 2026
CVE-2026-8391: Improper Input Validation5.3 MediumN/A1%May 12, 2026
CVE-2026-8390: Use After Free7.3 HighN/A0%May 12, 2026
CVE-2026-8389: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A0%May 12, 2026
CVE-2026-8388: Improper Restriction of Operations within the Bounds of a Memory Buffer6.5 MediumN/A0%May 12, 2026
2676-2700 of 16411
‹›