The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-96780: Loop with Unreachable Exit ConditionN/A8.2 High0%Oct 1, 2026
CVE-2026-71542: Improper Neutralization of Input During Web Page GenerationN/A8.7 High0%Oct 1, 2026
CVE-2026-70650: Improper Neutralization of Input During Web Page GenerationN/A8.8 High0%Oct 1, 2026
CVE-2026-54049: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Oct 1, 2026
CVE-2026-102667: Exposed Dangerous Method or Function8.3 High9.0 Critical0%Oct 1, 2026
CVE-2026-55230: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Oct 1, 2026
CVE-2026-55083: Deserialization of Untrusted Data9.1 CriticalN/A1%Oct 1, 2026
CVE-2026-103923: Reliance on Untrusted Inputs in a Security DecisionN/A2.1 Low0%Oct 1, 2026
CVE-2026-101890: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 1, 2026
CVE-2026-67104: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 1, 2026
CVE-2026-88789: Improper Restriction of XML External Entity Reference8.6 HighN/A1%Oct 1, 2026
CVE-2026-103249: Improper Neutralization of Input During Web Page Generation7.6 High6.9 Medium0%Oct 1, 2026
CVE-2026-7176: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 1, 2026
CVE-2026-7175: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 1, 2026
CVE-2026-7174: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 1, 2026
CVE-2026-7173: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 1, 2026
CVE-2026-103664: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 1, 2026
CVE-2026-103662: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Oct 1, 2026
CVE-2026-19902: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 1, 2026
CVE-2026-87973: Improper Neutralization of Input During Web Page Generation3.1 LowN/A0%Oct 1, 2026
CVE-2026-87970: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Oct 1, 2026
CVE-2026-103539: Missing Authentication for Critical Function5.4 Medium2.1 Low0%Oct 1, 2026
CVE-2026-103538: Missing Authentication for Critical Function6.5 Medium5.5 Medium0%Oct 1, 2026
CVE-2026-103536: Missing Authentication for Critical Function7.3 High5.5 Medium0%Oct 1, 2026
CVE-2026-103590: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Sep 30, 2026
351-375 of 16386
‹›