The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-23497: Improper Neutralization of Input During Web Page Generation5.4 Medium1.3 Low0%Jan 14, 2026
CVE-2025-71166: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Jan 14, 2026
CVE-2025-71165: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Jan 14, 2026
CVE-2025-71164: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Jan 14, 2026
CVE-2026-22686: Protection Mechanism Failure10.0 CriticalN/A1%Jan 14, 2026
CVE-2023-54341: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jan 13, 2026
CVE-2022-50905: Improper Neutralization of Input During Web Page Generation9.8 Critical5.1 Medium1%Jan 13, 2026
CVE-2022-50891: Improper Neutralization of Input During Web Page Generation5.0 Medium5.1 Medium0%Jan 13, 2026
CVE-2023-54332: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jan 13, 2026
CVE-2023-53985: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jan 13, 2026
CVE-2022-50896: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jan 13, 2026
CVE-2021-47750: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jan 13, 2026
CVE-2020-36919: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jan 13, 2026
CVE-2025-68658: Improper Neutralization of Input During Web Page Generation4.3 MediumN/A0%Jan 13, 2026
CVE-2026-22818: Improper Verification of Cryptographic Signature8.2 HighN/A0%Jan 13, 2026
CVE-2026-22817: Improper Verification of Cryptographic Signature8.2 HighN/A0%Jan 13, 2026
CVE-2025-68704: Use of Insufficiently Random Values7.5 High8.2 High0%Jan 13, 2026
CVE-2025-55462: Permissive Cross-domain Policy with Untrusted Domains6.5 MediumN/A0%Jan 13, 2026
CVE-2026-0885: Use After Free6.5 MediumN/A0%Jan 13, 2026
CVE-2026-0884: Use After Free9.8 CriticalN/A0%Jan 13, 2026
CVE-2026-0510: Inadequate Encryption Strength3.0 LowN/A0%Jan 13, 2026
CVE-2026-0500: Improper Control of Generation of Code9.6 CriticalN/A0%Jan 13, 2026
CVE-2026-22813: Improper Neutralization of Input During Web Page Generation6.1 Medium9.4 Critical1%Jan 12, 2026
CVE-2026-22804: Improper Privilege Management8.0 HighN/A0%Jan 12, 2026
CVE-2026-22033: Improper Neutralization of Input During Web Page Generation5.4 Medium8.6 High0%Jan 12, 2026
4201-4225 of 16521
‹›