The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-1406: URL Redirection to Untrusted Site3.5 Low2.0 Low0%Jan 25, 2026
CVE-2026-1191: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Jan 24, 2026
CVE-2026-24399: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%Jan 24, 2026
CVE-2025-71177: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Jan 23, 2026
CVE-2021-47906: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%Jan 23, 2026
CVE-2021-47897: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%Jan 23, 2026
CVE-2021-47892: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%Jan 23, 2026
CVE-2025-69908: Improper Access Control7.5 HighN/A0%Jan 23, 2026
CVE-2026-24132: Improper Neutralization of Special Elements used in a Command9.8 Critical7.7 High1%Jan 23, 2026
CVE-2025-9289: Improper Neutralization of Input During Web Page Generation4.7 Medium5.7 Medium0%Jan 22, 2026
CVE-2025-65098: Improper Neutralization of Input During Web Page Generation7.4 HighN/A0%Jan 22, 2026
CVE-2025-67683: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jan 22, 2026
CVE-2026-1225: Improper Input ValidationN/A1.8 Low0%Jan 22, 2026
CVE-2026-24037: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jan 22, 2026
CVE-2026-24001: Uncontrolled Resource Consumption7.5 High2.7 Low1%Jan 22, 2026
CVE-2026-23967: Improper Verification of Cryptographic Signature7.5 HighN/A0%Jan 22, 2026
CVE-2026-23966: Insufficient Verification of Data Authenticity9.1 CriticalN/A0%Jan 22, 2026
CVE-2026-23965: Improper Verification of Cryptographic Signature7.5 HighN/A0%Jan 22, 2026
CVE-2026-23956: Inefficient Regular Expression Complexity7.5 HighN/A1%Jan 22, 2026
CVE-2025-27380: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Jan 22, 2026
CVE-2025-27379: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Jan 22, 2026
CVE-2026-23737: Deserialization of Untrusted Data7.5 HighN/A1%Jan 21, 2026
CVE-2026-23960: Improper Neutralization of Input During Web Page Generation5.4 Medium7.3 High0%Jan 21, 2026
CVE-2026-23516: Improper Neutralization of Script in Attributes in a Web Page5.4 Medium8.6 High0%Jan 21, 2026
CVE-2026-23499: Improper Neutralization of Input During Web Page Generation5.4 Medium8.5 High0%Jan 21, 2026
4076-4100 of 16518
‹›