The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-30974: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Mar 10, 2026
CVE-2025-13902: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Mar 10, 2026
CVE-2026-30925: Inefficient Regular Expression Complexity7.5 High8.2 High1%Mar 10, 2026
CVE-2026-30918: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Mar 10, 2026
CVE-2026-30887: Improper Control of Generation of Code9.9 CriticalN/A1%Mar 10, 2026
CVE-2026-3813: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.3 Medium2.1 Low1%Mar 9, 2026
CVE-2025-40638: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Mar 9, 2026
CVE-2026-3797: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Mar 9, 2026
CVE-2026-3789: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low1%Mar 9, 2026
CVE-2026-3788: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low1%Mar 9, 2026
CVE-2026-3750: Server-Side Request Forgery (SSRF)4.7 Medium2.0 Low1%Mar 8, 2026
CVE-2026-3749: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low1%Mar 8, 2026
CVE-2026-3748: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low1%Mar 8, 2026
CVE-2026-3733: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Mar 8, 2026
CVE-2026-3725: Improper Neutralization of Special Elements Used in a Template Engine6.3 Medium2.1 Low1%Mar 8, 2026
CVE-2026-3721: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Mar 8, 2026
CVE-2026-3720: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Mar 8, 2026
CVE-2026-29779: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Mar 7, 2026
CVE-2026-2433: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Mar 7, 2026
CVE-2026-30238: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Mar 6, 2026
CVE-2025-69654: Uncontrolled Resource Consumption7.5 HighN/A0%Mar 6, 2026
CVE-2025-69653: Reachable Assertion6.5 MediumN/A0%Mar 6, 2026
CVE-2026-29091: Improper Neutralization of Directives in Dynamically Evaluated Code8.1 HighN/A1%Mar 6, 2026
CVE-2026-29183: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Mar 6, 2026
CVE-2026-29074: Improper Restriction of Recursive Entity References in DTDs7.5 HighN/A1%Mar 6, 2026
3551-3575 of 16501
‹›