The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-55230: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Oct 1, 2026
CVE-2026-103923: Reliance on Untrusted Inputs in a Security DecisionN/A2.1 Low0%Oct 1, 2026
CVE-2026-101890: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 1, 2026
CVE-2026-67104: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 1, 2026
CVE-2026-103249: Improper Neutralization of Input During Web Page Generation7.6 High6.9 Medium0%Oct 1, 2026
CVE-2026-7176: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 1, 2026
CVE-2026-7175: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 1, 2026
CVE-2026-7174: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 1, 2026
CVE-2026-7173: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 1, 2026
CVE-2026-103664: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 1, 2026
CVE-2026-103662: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Oct 1, 2026
CVE-2026-19902: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 1, 2026
CVE-2026-87973: Improper Neutralization of Input During Web Page Generation3.1 LowN/A0%Oct 1, 2026
CVE-2026-87970: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Oct 1, 2026
CVE-2026-103590: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Sep 30, 2026
CVE-2026-103589: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Sep 30, 2026
CVE-2026-103588: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Sep 30, 2026
CVE-2026-103587: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Sep 30, 2026
CVE-2026-47096: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Sep 30, 2026
CVE-2026-102147: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%Sep 30, 2026
CVE-2026-102126: Improper Neutralization of Input During Web Page Generation8.1 HighN/A0%Sep 30, 2026
CVE-2026-102100: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Sep 30, 2026
CVE-2026-102092: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Sep 30, 2026
CVE-2026-103389: Improper Neutralization of Input During Web Page GenerationN/A6.2 Medium0%Sep 30, 2026
CVE-2026-103388: Improper Neutralization of Input During Web Page GenerationN/A6.2 Medium0%Sep 30, 2026
326-350 of 10601
‹›