The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-107801: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 8, 2026
CVE-2026-107798: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 8, 2026
CVE-2026-107797: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 8, 2026
CVE-2026-107796: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 8, 2026
CVE-2026-78407: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 8, 2026
CVE-2026-17189: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 8, 2026
CVE-2026-11936: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 8, 2026
CVE-2026-107396: Incomplete Denylist to Cross-Site Scripting5.4 MediumN/A0%Oct 8, 2026
CVE-2026-107390: Memory Allocation with Excessive Size Value7.5 HighN/A0%Oct 8, 2026
CVE-2026-104075: Authentication Bypass Using an Alternate Path or Channel9.8 Critical9.3 Critical1%Oct 8, 2026
CVE-2026-107700: Improper Control of Generation of Code9.8 Critical9.3 Critical1%Oct 8, 2026
CVE-2026-107380: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 8, 2026
CVE-2026-107300: Uncontrolled Recursion7.5 HighN/A0%Oct 8, 2026
CVE-2026-107298: Uncontrolled Recursion5.3 MediumN/A0%Oct 8, 2026
CVE-2026-104078: Improper Neutralization of Input During Web Page Generation7.8 High8.4 High0%Oct 8, 2026
CVE-2026-104077: Improper Neutralization of Input During Web Page Generation7.8 High8.5 High0%Oct 8, 2026
CVE-2026-13258: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 8, 2026
CVE-2026-105831: Improper Neutralization of Input During Web Page Generation4.3 Medium5.3 Medium0%Oct 8, 2026
CVE-2026-14990: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%Oct 8, 2026
CVE-2026-104646: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Oct 8, 2026
CVE-2026-76276: Initialization of a Resource with an Insecure Default4.3 MediumN/A0%Oct 7, 2026
CVE-2025-70519: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 7, 2026
CVE-2025-70515: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 7, 2026
CVE-2026-102258: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 7, 2026
CVE-2026-93684: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 7, 2026
251-275 of 10601
‹›