The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-14576: Improper Control of Generation of Code7.8 High7.4 High0%Apr 30, 2026
CVE-2026-1493: Improper Neutralization of Input During Web Page Generation5.4 Medium4.6 Medium0%Apr 30, 2026
CVE-2026-6498: Insufficient Verification of Data Authenticity5.3 MediumN/A0%Apr 30, 2026
CVE-2018-25309: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%Apr 29, 2026
CVE-2026-40230: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Apr 29, 2026
CVE-2026-42523: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A0%Apr 29, 2026
CVE-2026-42518: Use of Hard-coded Cryptographic KeyN/A8.7 High0%Apr 29, 2026
CVE-2025-10503: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 29, 2026
CVE-2026-7306: Use of Hard-coded Cryptographic Key5.6 Medium2.9 Low0%Apr 28, 2026
CVE-2026-7305: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Apr 28, 2026
CVE-2026-7303: Improper Control of Resource Identifiers3.7 Low2.9 Low1%Apr 28, 2026
CVE-2026-37750: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 28, 2026
CVE-2026-7292: Improper Authorization5.6 Medium2.9 Low0%Apr 28, 2026
CVE-2026-7291: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Apr 28, 2026
CVE-2026-7290: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Apr 28, 2026
CVE-2026-7191: Improper Control of Generation of Code7.2 High8.6 High1%Apr 27, 2026
CVE-2026-5362: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Apr 27, 2026
CVE-2026-29971: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 27, 2026
CVE-2026-41467: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Apr 27, 2026
CVE-2026-27172: Deserialization of Untrusted Data8.8 HighN/A1%Apr 27, 2026
CVE-2026-40858: Deserialization of Untrusted Data8.8 HighN/A1%Apr 27, 2026
CVE-2026-40473: Deserialization of Untrusted Data8.8 HighN/A1%Apr 27, 2026
CVE-2026-40048: Deserialization of Untrusted Data7.8 HighN/A0%Apr 27, 2026
CVE-2026-40860: Deserialization of Untrusted DataN/AN/A2%Apr 27, 2026
CVE-2026-7060: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Apr 26, 2026
2826-2850 of 16411
‹›