The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-0996: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Feb 10, 2026
CVE-2026-24325: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Feb 10, 2026
CVE-2026-23686: Improper Neutralization of CRLF Sequences in HTTP Headers3.4 LowN/A0%Feb 10, 2026
CVE-2026-25931: Incorrect Default Permissions7.8 HighN/A0%Feb 9, 2026
CVE-2026-25892: Improper Input Validation7.5 HighN/A2%Feb 9, 2026
CVE-2026-25881: Improperly Controlled Modification of Object Prototype Attributes9.0 CriticalN/A1%Feb 9, 2026
CVE-2026-25528: Server-Side Request Forgery (SSRF)5.8 MediumN/A0%Feb 9, 2026
CVE-2025-63354: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Feb 9, 2026
CVE-2026-1615: Improper Control of Generation of Code9.8 Critical8.2 High1%Feb 9, 2026
CVE-2026-2201: Improper Neutralization of Input During Web Page Generation2.4 Low1.9 Low0%Feb 9, 2026
CVE-2026-2141: Improper Authorization8.8 High2.1 Low0%Feb 8, 2026
CVE-2026-2107: Improper Authorization6.3 Medium2.1 Low0%Feb 7, 2026
CVE-2026-2106: Improper Authorization6.3 Medium2.1 Low0%Feb 7, 2026
CVE-2026-2105: Improper Authorization6.3 Medium2.1 Low0%Feb 7, 2026
CVE-2026-2079: Improper Authorization6.3 Medium2.1 Low0%Feb 7, 2026
CVE-2026-2078: Improper Authorization6.3 Medium2.1 Low0%Feb 7, 2026
CVE-2026-2077: Improper Authorization6.3 Medium2.1 Low0%Feb 7, 2026
CVE-2026-2076: Improper Authorization6.3 Medium2.1 Low0%Feb 7, 2026
CVE-2026-2075: Improper Access Control6.3 Medium2.1 Low0%Feb 7, 2026
CVE-2026-25533: Loop with Unreachable Exit Condition8.8 High6.4 Medium0%Feb 6, 2026
CVE-2026-25516: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 6, 2026
CVE-2026-25641: Time-of-check Time-of-use (TOCTOU) Race Condition10.0 CriticalN/A1%Feb 6, 2026
CVE-2026-25640: Improper Limitation of a Pathname to a Restricted Directory5.4 MediumN/A0%Feb 6, 2026
CVE-2026-25587: Improper Control of Generation of Code10.0 CriticalN/A1%Feb 6, 2026
CVE-2026-25586: Improper Neutralization of Special Elements in Output Used by a Downstream Component10.0 CriticalN/A1%Feb 6, 2026
3926-3950 of 16507
‹›