The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-41722: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 8, 2026
CVE-2026-11489: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Jun 8, 2026
CVE-2021-47984: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Jun 8, 2026
CVE-2021-47983: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Jun 8, 2026
CVE-2021-47982: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Jun 8, 2026
CVE-2026-9851: Authorization Bypass Through User-Controlled Key7.2 HighN/A1%Jun 6, 2026
CVE-2026-9594: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Jun 6, 2026
CVE-2026-9016: Improper Output Neutralization for Logs5.3 MediumN/A0%Jun 6, 2026
CVE-2026-7624: Missing Authorization4.3 MediumN/A0%Jun 6, 2026
CVE-2026-9197: Improper Limitation of a Pathname to a Restricted Directory4.9 MediumN/A1%Jun 6, 2026
CVE-2026-8991: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Jun 6, 2026
CVE-2026-8978: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Jun 6, 2026
CVE-2026-7566: Deserialization of Untrusted Data6.6 MediumN/A1%Jun 6, 2026
CVE-2026-7565: Improper Limitation of a Pathname to a Restricted Directory4.9 MediumN/A1%Jun 6, 2026
CVE-2026-7537: Unrestricted Upload of File with Dangerous Type7.2 HighN/A1%Jun 6, 2026
CVE-2026-2500: Improper Limitation of a Pathname to a Restricted Directory4.4 MediumN/A0%Jun 6, 2026
CVE-2026-8901: Improper Neutralization of Input During Web Page Generation7.2 HighN/A1%Jun 6, 2026
CVE-2026-8438: Improper Neutralization of Input During Web Page Generation7.2 HighN/A1%Jun 6, 2026
CVE-2026-9719: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jun 6, 2026
CVE-2026-8900: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jun 6, 2026
CVE-2026-7047: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jun 6, 2026
CVE-2025-12656: External Control of File Name or Path3.8 LowN/A0%Jun 6, 2026
CVE-2026-7523: Missing Authorization4.3 MediumN/A0%Jun 5, 2026
CVE-2026-11423: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.4 Critical0%Jun 5, 2026
CVE-2026-46401: Insufficient Session ExpirationN/A5.3 Medium0%Jun 5, 2026
2951-2975 of 17498
‹›