The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-24771: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Jan 27, 2026
CVE-2026-24473: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium6.3 Medium0%Jan 27, 2026
CVE-2026-24472: Use of Cache Containing Sensitive Information5.3 MediumN/A1%Jan 27, 2026
CVE-2026-24398: Incorrect Regular Expression4.8 MediumN/A0%Jan 27, 2026
CVE-2026-24348: Improper Input Validation6.1 Medium7.4 High0%Jan 27, 2026
CVE-2026-24824: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium0%Jan 27, 2026
CVE-2026-24819: Improperly Controlled Sequential Memory AllocationN/A6.3 Medium0%Jan 27, 2026
CVE-2026-24816: Loop with Unreachable Exit ConditionN/A10.0 Critical0%Jan 27, 2026
CVE-2026-24815: Unrestricted Upload of File with Dangerous TypeN/A10.0 Critical0%Jan 27, 2026
CVE-2026-24807: Improper Verification of Cryptographic SignatureN/A5.3 Medium0%Jan 27, 2026
CVE-2026-24806: Improper Control of Generation of CodeN/A5.3 Medium0%Jan 27, 2026
CVE-2026-24802: Loop with Unreachable Exit ConditionN/A5.3 Medium0%Jan 27, 2026
CVE-2026-24794: Improper Restriction of Operations within the Bounds of a Memory BufferN/A9.2 Critical0%Jan 27, 2026
CVE-2026-1464: Integer Overflow or WraparoundN/A4.6 Medium0%Jan 27, 2026
CVE-2026-24490: Improper Neutralization of Input During Web Page Generation8.1 HighN/A0%Jan 27, 2026
CVE-2026-24400: Improper Restriction of XML External Entity Reference9.1 Critical8.2 High1%Jan 26, 2026
CVE-2026-22696: Improper Verification of Cryptographic SignatureN/A9.3 Critical0%Jan 26, 2026
CVE-2025-59472: Uncontrolled Resource Consumption5.9 MediumN/A0%Jan 26, 2026
CVE-2025-11687: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 26, 2026
CVE-2025-70368: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 26, 2026
CVE-2020-36956: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Jan 26, 2026
CVE-2020-36960: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Jan 26, 2026
CVE-2020-36954: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Jan 26, 2026
CVE-2026-1429: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Jan 26, 2026
CVE-2020-36932: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jan 25, 2026
4051-4075 of 16518
‹›