The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-18312: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 25, 2026
CVE-2026-97869: Deserialization of Untrusted Data4.1 Medium1.2 Low0%Sep 25, 2026
CVE-2026-85293: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Sep 25, 2026
CVE-2026-100190: Improper Neutralization of Input During Web Page GenerationN/A6.3 Medium0%Sep 25, 2026
CVE-2026-100176: Improper Neutralization of Input During Web Page GenerationN/A8.5 High0%Sep 25, 2026
CVE-2026-100174: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Sep 25, 2026
CVE-2026-100172: Improper Neutralization of Input During Web Page GenerationN/A8.5 High0%Sep 25, 2026
CVE-2026-6088: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Sep 25, 2026
CVE-2026-6087: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Sep 25, 2026
CVE-2026-6086: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Sep 25, 2026
CVE-2026-6085: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Sep 25, 2026
CVE-2026-6084: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Sep 25, 2026
CVE-2026-6083: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Sep 25, 2026
CVE-2026-6082: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Sep 25, 2026
CVE-2026-96752: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Sep 25, 2026
CVE-2026-84280: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Sep 25, 2026
CVE-2026-17577: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 25, 2026
CVE-2026-83591: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Sep 25, 2026
CVE-2026-97721: Authorization Bypass Through User-Controlled Key2.7 Low2.0 Low0%Sep 25, 2026
CVE-2025-14814: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 25, 2026
CVE-2026-97723: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 25, 2026
CVE-2026-97368: Authorization Bypass Through User-Controlled Key6.3 Medium2.1 Low0%Sep 24, 2026
CVE-2026-88388: Stack-based Buffer Overflow7.5 HighN/A0%Sep 24, 2026
CVE-2026-14441: Comparison Using Wrong FactorsN/A6.9 Medium0%Sep 24, 2026
CVE-2026-97326: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Sep 24, 2026
476-500 of 16386
‹›