The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-25520: Improper Neutralization of Special Elements in Output Used by a Downstream Component10.0 CriticalN/A1%Feb 6, 2026
CVE-2026-25647: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Feb 6, 2026
CVE-2026-24903: Improper Neutralization of Input During Web Page Generation5.4 Medium5.3 Medium0%Feb 6, 2026
CVE-2025-70963: Exposure of Sensitive Information to an Unauthorized Actor7.6 HighN/A0%Feb 6, 2026
CVE-2019-25301: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Feb 6, 2026
CVE-2019-25294: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Feb 6, 2026
CVE-2025-13523: Improper Neutralization of Input During Web Page Generation7.7 HighN/A0%Feb 6, 2026
CVE-2026-2010: Improper Authorization4.2 Medium1.3 Low0%Feb 6, 2026
CVE-2026-0521: Improper Neutralization of Input During Web Page Generation6.1 Medium5.6 Medium0%Feb 6, 2026
CVE-2025-15551: Improper Neutralization of Directives in Dynamically Evaluated Code5.6 Medium5.9 Medium0%Feb 5, 2026
CVE-2025-70792: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 5, 2026
CVE-2025-70791: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 5, 2026
CVE-2025-68723: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A0%Feb 5, 2026
CVE-2025-68643: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 5, 2026
CVE-2020-37152: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Feb 5, 2026
CVE-2026-1953: Improper Neutralization of Input During Web Page GenerationN/A8.2 High0%Feb 5, 2026
CVE-2026-25526: Improper Neutralization of Special Elements Used in a Template Engine9.8 CriticalN/A1%Feb 4, 2026
CVE-2026-25521: Improperly Controlled Modification of Object Prototype Attributes8.8 High9.4 Critical0%Feb 4, 2026
CVE-2023-38017: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Feb 4, 2026
CVE-2025-70545: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Feb 4, 2026
CVE-2026-1813: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Feb 4, 2026
CVE-2026-1812: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 Low0%Feb 3, 2026
CVE-2025-36033: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Feb 3, 2026
CVE-2020-37087: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Feb 3, 2026
CVE-2026-25155: Cross-Site Request Forgery (CSRF)5.9 MediumN/A0%Feb 3, 2026
3951-3975 of 16507
‹›