The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-26682: Improper Control of Generation of Code7.8 HighN/A0%Feb 26, 2026
CVE-2025-56605: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 26, 2026
CVE-2025-64999: Improper Neutralization of Input During Web Page Generation5.4 Medium7.3 High0%Feb 26, 2026
CVE-2026-27974: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Feb 26, 2026
CVE-2026-27963: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Feb 26, 2026
CVE-2026-27973: Improper Neutralization of Input During Web Page Generation4.0 MediumN/A0%Feb 26, 2026
CVE-2026-27970: Improper Neutralization of Input During Web Page Generation6.1 Medium7.6 High0%Feb 26, 2026
CVE-2026-27904: Inefficient Regular Expression Complexity7.5 HighN/A1%Feb 26, 2026
CVE-2026-27903: Inefficient Algorithmic Complexity7.5 HighN/A1%Feb 26, 2026
CVE-2026-27837: Improperly Controlled Modification of Object Prototype Attributes6.3 MediumN/A1%Feb 26, 2026
CVE-2026-27830: Deserialization of Untrusted DataN/A8.9 High2%Feb 26, 2026
CVE-2026-27495: Improper Control of Generation of Code9.9 Critical9.4 Critical1%Feb 25, 2026
CVE-2026-27616: Improper Neutralization of Input During Web Page Generation7.3 HighN/A1%Feb 25, 2026
CVE-2026-25736: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 25, 2026
CVE-2026-25735: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 25, 2026
CVE-2026-25734: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 25, 2026
CVE-2026-25733: Improper Neutralization of Input During Web Page Generation7.3 HighN/A0%Feb 25, 2026
CVE-2026-25743: Improper Neutralization of Input During Web Page Generation4.8 Medium7.2 High1%Feb 25, 2026
CVE-2026-27702: Improper Input Validation9.9 CriticalN/A1%Feb 25, 2026
CVE-2026-27701: Improper Control of Generation of CodeN/A8.8 High0%Feb 25, 2026
CVE-2026-27700: Insufficient Verification of Data Authenticity8.2 HighN/A0%Feb 25, 2026
CVE-2025-69771: Unrestricted Upload of File with Dangerous Type9.6 CriticalN/A0%Feb 25, 2026
CVE-2026-27727: Improper Neutralization of Special Elements in Output Used by a Downstream ComponentN/A8.9 High2%Feb 25, 2026
CVE-2026-27645: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Feb 25, 2026
CVE-2026-27639: Improper Neutralization of Input During Web Page Generation5.4 Medium8.5 High0%Feb 25, 2026
3676-3700 of 16503
‹›