The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-2849: Improper Access Control5.4 Medium2.1 Low0%Feb 20, 2026
CVE-2026-27506: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Feb 20, 2026
CVE-2026-27505: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Feb 20, 2026
CVE-2026-27503: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Feb 20, 2026
CVE-2026-27502: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Feb 20, 2026
CVE-2025-68846: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Feb 20, 2026
CVE-2025-67438: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 20, 2026
CVE-2026-26996: Inefficient Regular Expression Complexity7.5 High8.7 High1%Feb 20, 2026
CVE-2026-26993: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Feb 20, 2026
CVE-2026-27009: Improper Neutralization of Input During Web Page Generation5.8 MediumN/A0%Feb 20, 2026
CVE-2026-26953: Improper Input Validation5.4 MediumN/A0%Feb 19, 2026
CVE-2026-26952: Improper Input Validation5.4 MediumN/A0%Feb 19, 2026
CVE-2025-13672: Improper Neutralization of Input During Web Page Generation5.4 Medium7.0 High0%Feb 19, 2026
CVE-2026-27013: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Feb 19, 2026
CVE-2026-26059: Improper Neutralization of Input During Web Page Generation5.4 Medium2.1 Low0%Feb 19, 2026
CVE-2026-23619: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Feb 19, 2026
CVE-2026-23618: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Feb 19, 2026
CVE-2026-23617: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Feb 19, 2026
CVE-2026-23616: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Feb 19, 2026
CVE-2026-23615: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Feb 19, 2026
CVE-2026-23614: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Feb 19, 2026
CVE-2026-23613: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Feb 19, 2026
CVE-2026-23612: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Feb 19, 2026
CVE-2026-23611: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Feb 19, 2026
CVE-2026-23610: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Feb 19, 2026
3776-3800 of 16504