The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-32948: Improper Neutralization of Special Elements used in an OS Command7.8 High6.7 Medium0%Mar 24, 2026
CVE-2026-23919: Exposure of Data Element to Wrong Session6.0 Medium7.1 High0%Mar 24, 2026
CVE-2026-33400: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 24, 2026
CVE-2026-33336: Improper Control of Generation of Code8.8 High6.5 Medium1%Mar 24, 2026
CVE-2026-4723: Use After Free9.8 CriticalN/A1%Mar 24, 2026
CVE-2026-4716: Use of Uninitialized Resource9.1 CriticalN/A0%Mar 24, 2026
CVE-2026-4702: Access of Resource Using Incompatible Type9.8 CriticalN/A1%Mar 24, 2026
CVE-2026-4698: Access of Resource Using Incompatible Type9.8 CriticalN/A1%Mar 24, 2026
CVE-2026-4701: Use After Free9.8 CriticalN/A0%Mar 24, 2026
CVE-2026-4741: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.6 High0%Mar 24, 2026
CVE-2026-4735: Deserialization of Untrusted DataN/A8.7 High0%Mar 24, 2026
CVE-2026-33306: Integer Overflow or Wraparound7.5 High4.5 Medium0%Mar 24, 2026
CVE-2026-33167: Improper Neutralization of Input During Web Page Generation6.1 Medium1.3 Low0%Mar 23, 2026
CVE-2025-60948: Improper Neutralization of Input During Web Page Generation4.6 Medium5.1 Medium0%Mar 23, 2026
CVE-2026-4597: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Mar 23, 2026
CVE-2026-33548: Improper Neutralization of Input During Web Page Generation6.1 Medium8.6 High0%Mar 23, 2026
CVE-2026-33517: Improper Neutralization of Input During Web Page Generation6.1 Medium8.6 High0%Mar 23, 2026
CVE-2026-32851: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Mar 23, 2026
CVE-2024-46879: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 23, 2026
CVE-2024-46878: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 23, 2026
CVE-2026-33683: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Mar 23, 2026
CVE-2026-32852: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Mar 23, 2026
CVE-2026-32850: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Mar 23, 2026
CVE-2026-4594: SQL Injection: Hibernate7.3 High5.5 Medium0%Mar 23, 2026
CVE-2026-4593: SQL Injection: Hibernate6.3 Medium2.1 Low0%Mar 23, 2026
3276-3300 of 16434
‹›