The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-12037: Server-Side Request Forgery (SSRF)5.5 MediumN/A0%Sep 25, 2026
CVE-2026-97846: Improper Authentication6.8 MediumN/A0%Sep 25, 2026
CVE-2026-96766: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 25, 2026
CVE-2026-96039: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Sep 25, 2026
CVE-2026-94376: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 25, 2026
CVE-2026-93899: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Sep 25, 2026
CVE-2026-93897: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 25, 2026
CVE-2026-93477: Improperly Controlled Modification of Dynamically-Determined Object AttributesN/A5.9 Medium0%Sep 25, 2026
CVE-2026-93399: Authorization Bypass Through User-Controlled Key9.1 CriticalN/A0%Sep 25, 2026
CVE-2026-93303: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Sep 25, 2026
CVE-2026-92829: Missing Authorization4.3 MediumN/A0%Sep 25, 2026
CVE-2026-92799: Improper Authorization5.3 MediumN/A0%Sep 25, 2026
CVE-2026-92746: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 25, 2026
CVE-2026-92212: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 25, 2026
CVE-2026-89055: Missing Authorization9.1 CriticalN/A0%Sep 25, 2026
CVE-2026-84281: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Sep 25, 2026
CVE-2026-84279: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Sep 25, 2026
CVE-2026-83591: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Sep 25, 2026
CVE-2026-78397: Server-Side Request Forgery (SSRF)4.0 MediumN/A0%Sep 25, 2026
CVE-2026-78394: Improper Limitation of a Pathname to a Restricted Directory4.1 MediumN/A0%Sep 25, 2026
CVE-2026-78393: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 25, 2026
CVE-2026-75553: Use of Hard-coded Cryptographic Key2.4 Low2.4 Low0%Sep 25, 2026
CVE-2026-62062: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Sep 25, 2026
CVE-2026-19775: Missing Authorization4.3 MediumN/A0%Sep 25, 2026
CVE-2026-14281: Improper Privilege Management9.8 CriticalN/A1%Sep 25, 2026
5026-5050 of 586239
‹›