The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2023-54342: Missing Authentication for Critical Function9.8 Critical9.3 Critical0%May 5, 2026
CVE-2026-4665: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%May 5, 2026
CVE-2026-42235: Improper Neutralization of Alternate XSS Syntax9.6 Critical8.8 High1%May 4, 2026
CVE-2026-42231: Improperly Controlled Modification of Object Prototype Attributes8.8 High9.4 Critical1%May 4, 2026
CVE-2026-41686: Incorrect Permission Assignment for Critical Resource4.4 Medium4.8 Medium0%May 4, 2026
CVE-2026-42077: Improperly Controlled Modification of Object Prototype Attributes5.2 MediumN/A0%May 4, 2026
CVE-2026-7371: Improper Neutralization of Input During Web Page Generation7.4 HighN/A0%May 4, 2026
CVE-2026-42366: Improper Neutralization of Input During Web Page Generation7.4 HighN/A0%May 4, 2026
CVE-2026-7710: Improper Authentication7.3 High5.5 Medium1%May 4, 2026
CVE-2026-7699: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%May 3, 2026
CVE-2026-7679: Improper Authentication7.3 High5.5 Medium1%May 3, 2026
CVE-2026-7678: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%May 3, 2026
CVE-2026-7677: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%May 3, 2026
CVE-2026-7676: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium2.1 Low1%May 3, 2026
CVE-2026-7673: Unrestricted Upload of File with Dangerous Type4.7 Medium2.0 Low0%May 3, 2026
CVE-2026-7672: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%May 3, 2026
CVE-2026-4024: Missing Authorization5.3 MediumN/A0%May 2, 2026
CVE-2026-7605: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%May 2, 2026
CVE-2026-5110: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%May 2, 2026
CVE-2026-5109: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%May 2, 2026
CVE-2026-7604: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%May 2, 2026
CVE-2025-69606: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 1, 2026
CVE-2026-37503: Improper Neutralization of Input During Web Page Generation6.9 MediumN/A0%May 1, 2026
CVE-2026-3346: Improper Neutralization of Special Elements used in an SQL Command6.4 MediumN/A0%Apr 30, 2026
CVE-2026-7429: Improper Neutralization of Input During Web Page Generation4.6 Medium2.1 Low0%Apr 30, 2026
2801-2825 of 16411
‹›