The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-23499: Improper Neutralization of Input During Web Page Generation5.4 Medium8.5 High0%Jan 21, 2026
CVE-2026-22793: Improper Control of Generation of Code9.6 CriticalN/A1%Jan 21, 2026
CVE-2026-22792: Improper Encoding or Escaping of Output9.6 CriticalN/A1%Jan 21, 2026
CVE-2021-47857: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%Jan 21, 2026
CVE-2025-57681: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 21, 2026
CVE-2026-21975: Improper Resource Shutdown or Release4.5 MediumN/A0%Jan 20, 2026
CVE-2026-21960: Improper Access Control6.5 MediumN/A0%Jan 20, 2026
CVE-2026-21947: Improper Neutralization of Input During Web Page Generation3.1 LowN/A0%Jan 20, 2026
CVE-2026-21933: Undefined Security Weakness6.1 MediumN/A0%Jan 20, 2026
CVE-2026-21925: Undefined Security Weakness4.8 MediumN/A0%Jan 20, 2026
CVE-2026-21945: Uncontrolled Resource Consumption7.5 HighN/A1%Jan 20, 2026
CVE-2026-21932: Improper Validation of Specified Type of Input7.4 HighN/A1%Jan 20, 2026
CVE-2026-1245: Undefined Security Weakness6.5 MediumN/A1%Jan 20, 2026
CVE-2025-67824: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 20, 2026
CVE-2025-36409: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 20, 2026
CVE-2025-36408: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 20, 2026
CVE-2025-36396: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 20, 2026
CVE-2025-36113: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jan 20, 2026
CVE-2025-36066: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 20, 2026
CVE-2025-58095: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 20, 2026
CVE-2025-58094: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 20, 2026
CVE-2025-58093: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 20, 2026
CVE-2025-58092: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 20, 2026
CVE-2025-58091: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 20, 2026
CVE-2025-58090: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 20, 2026
4101-4125 of 16519
‹›