The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-66523: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jan 20, 2026
CVE-2026-23947: Improper Neutralization of Special Elements used in a Command9.8 Critical9.3 Critical1%Jan 20, 2026
CVE-2026-23847: Improper Neutralization of Input During Web Page Generation6.1 Medium2.1 Low0%Jan 19, 2026
CVE-2026-1181: Permissive Cross-domain Policy with Untrusted Domains9.0 CriticalN/A0%Jan 19, 2026
CVE-2025-59355: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Jan 19, 2026
CVE-2026-23733: Improper Control of Generation of Code6.4 MediumN/A0%Jan 18, 2026
CVE-2026-1126: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Jan 18, 2026
CVE-2026-1112: Improper Authorization5.4 Medium2.1 Low0%Jan 18, 2026
CVE-2026-1111: Improper Limitation of a Pathname to a Restricted Directory4.7 Medium2.0 Low1%Jan 18, 2026
CVE-2026-1064: Improper Neutralization of Special Elements used in a Command4.7 Medium2.0 Low5%Jan 17, 2026
CVE-2026-1063: Improper Neutralization of Special Elements used in a Command4.7 Medium2.0 Low5%Jan 17, 2026
CVE-2026-1062: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Jan 17, 2026
CVE-2026-1061: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Jan 17, 2026
CVE-2026-1050: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Jan 17, 2026
CVE-2025-14632: Unrestricted Upload of File with Dangerous Type4.4 MediumN/A0%Jan 17, 2026
CVE-2026-22865: Download of Code Without Integrity Check7.4 High8.6 High0%Jan 16, 2026
CVE-2026-22816: Inclusion of Functionality from Untrusted Control Sphere7.4 High8.6 High0%Jan 16, 2026
CVE-2026-23725: Improper Neutralization of Input During Web Page Generation5.4 Medium5.3 Medium0%Jan 16, 2026
CVE-2026-23722: Improper Neutralization of Input During Web Page Generation9.1 CriticalN/A0%Jan 16, 2026
CVE-2026-23645: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Jan 16, 2026
CVE-2021-47844: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jan 16, 2026
CVE-2021-47842: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%Jan 16, 2026
CVE-2021-47841: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jan 16, 2026
CVE-2021-47840: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%Jan 16, 2026
CVE-2021-47839: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%Jan 16, 2026
4151-4175 of 16520
‹›