The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-67405: Missing Origin Validation in WebSockets8.1 High5.3 Medium0%Sep 23, 2026
CVE-2026-66077: Improper Neutralization of Input During Web Page Generation6.1 Medium7.3 High0%Sep 23, 2026
CVE-2026-84683: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Sep 23, 2026
CVE-2026-96759: Improper Control of Generation of Code9.8 Critical9.3 Critical0%Sep 23, 2026
CVE-2026-96757: Improper Control of Generation of Code9.8 Critical9.3 Critical1%Sep 23, 2026
CVE-2026-96755: Improper Control of Generation of Code9.8 Critical9.3 Critical0%Sep 23, 2026
CVE-2026-96754: Improper Control of Generation of Code9.8 Critical9.3 Critical0%Sep 23, 2026
CVE-2026-93769: Improper Neutralization of Input During Web Page GenerationN/A7.2 High0%Sep 23, 2026
CVE-2026-59167: Improper Neutralization of Input During Web Page Generation10.0 CriticalN/A0%Sep 23, 2026
CVE-2026-5696: Improper Neutralization of Input During Web Page GenerationN/A5.9 Medium0%Sep 23, 2026
CVE-2026-96454: Missing Authorization8.2 HighN/A0%Sep 23, 2026
CVE-2026-95627: Incorrect Permission Assignment for Critical Resource7.7 HighN/A0%Sep 23, 2026
CVE-2026-91818: Use After Free5.5 MediumN/A0%Sep 23, 2026
CVE-2026-91817: Out-of-bounds Read6.1 MediumN/A0%Sep 23, 2026
CVE-2026-91816: Use After Free7.8 HighN/A0%Sep 23, 2026
CVE-2026-91806: Use After Free7.8 HighN/A0%Sep 23, 2026
CVE-2026-91799: Use After Free7.8 HighN/A0%Sep 23, 2026
CVE-2026-91792: Use After Free7.8 HighN/A0%Sep 23, 2026
CVE-2026-91791: Use After Free7.8 HighN/A0%Sep 23, 2026
CVE-2026-91788: Exposure of Resource to Wrong Sphere4.7 MediumN/A0%Sep 23, 2026
CVE-2026-50228: Active Debug CodeN/A6.1 Medium0%Sep 23, 2026
CVE-2026-5924: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 23, 2026
CVE-2026-88997: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Sep 23, 2026
CVE-2026-86842: Missing Authorization6.8 MediumN/A0%Sep 23, 2026
CVE-2026-85006: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Sep 23, 2026
451-475 of 10596
‹›