The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-42711: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42709: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42706: Missing Authorization7.5 HighN/A0%Oct 10, 2026
CVE-2026-42705: Missing Authorization7.5 HighN/A0%Oct 10, 2026
CVE-2026-42704: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 10, 2026
CVE-2026-42702: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42699: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42697: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42696: Improper Control of Generation of Code10.0 CriticalN/A0%Oct 10, 2026
CVE-2026-42693: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42633: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Oct 10, 2026
CVE-2026-42632: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42631: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42630: Insertion of Sensitive Information Into Sent Data7.5 HighN/A0%Oct 10, 2026
CVE-2026-42419: Insertion of Sensitive Information Into Sent Data5.9 MediumN/A0%Oct 10, 2026
CVE-2026-40808: Missing Authorization6.5 MediumN/A0%Oct 10, 2026
CVE-2026-40805: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A0%Oct 10, 2026
CVE-2026-40803: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-40802: Missing Authorization7.6 HighN/A0%Oct 10, 2026
CVE-2026-40801: Missing Authorization8.1 HighN/A0%Oct 10, 2026
CVE-2026-40800: Improper Neutralization of Special Elements used in an SQL Command9.3 CriticalN/A0%Oct 10, 2026
CVE-2026-40777: Missing Authorization8.1 HighN/A0%Oct 10, 2026
CVE-2026-39802: Improper Control of Generation of Code8.1 HighN/A0%Oct 10, 2026
CVE-2026-39801: Incorrect Privilege Assignment9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-39800: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
5351-5375 of 406803
‹›