The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-2946: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Feb 22, 2026
CVE-2026-27574: Improper Control of Generation of Code9.9 CriticalN/A1%Feb 21, 2026
CVE-2025-14339: Missing Authorization6.5 MediumN/A0%Feb 21, 2026
CVE-2026-2864: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium2.1 Low1%Feb 21, 2026
CVE-2026-27469: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 21, 2026
CVE-2026-27458: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 Medium8.7 High0%Feb 21, 2026
CVE-2026-2863: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium2.1 Low1%Feb 21, 2026
CVE-2026-27210: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Feb 21, 2026
CVE-2026-2860: Improper Authorization6.3 Medium2.1 Low0%Feb 21, 2026
CVE-2026-27196: Improper Neutralization of Input During Web Page Generation8.1 HighN/A0%Feb 21, 2026
CVE-2026-27193: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium8.2 High0%Feb 21, 2026
CVE-2026-27192: Origin Validation Error8.1 High7.6 High0%Feb 21, 2026
CVE-2026-27191: URL Redirection to Untrusted Site6.1 Medium7.4 High0%Feb 21, 2026
CVE-2026-27169: Improper Neutralization of Input During Web Page Generation8.9 HighN/A1%Feb 21, 2026
CVE-2026-27147: Improper Neutralization of Input During Web Page Generation5.4 Medium6.9 Medium0%Feb 21, 2026
CVE-2019-25454: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Feb 20, 2026
CVE-2019-25453: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Feb 20, 2026
CVE-2019-25448: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Feb 20, 2026
CVE-2019-25449: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Feb 20, 2026
CVE-2026-27190: Improper Neutralization of Special Elements used in an OS Command8.1 HighN/A4%Feb 20, 2026
CVE-2026-2472: Improper Neutralization of Input During Web Page Generation8.1 High8.6 High1%Feb 20, 2026
CVE-2026-2852: Improper Access Control6.3 Medium2.1 Low0%Feb 20, 2026
CVE-2026-2851: Improper Access Control6.3 Medium2.1 Low0%Feb 20, 2026
CVE-2026-2850: Improper Access Control6.3 Medium2.1 Low0%Feb 20, 2026
CVE-2019-25445: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Feb 20, 2026
3751-3775 of 16504
‹›