The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-4637: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium1%Sep 24, 2026
CVE-2026-96882: Improper Authorization5.3 Medium5.5 Medium0%Sep 24, 2026
CVE-2026-96881: Improper Authorization5.3 Medium5.5 Medium0%Sep 24, 2026
CVE-2026-96880: Improper Authorization5.3 Medium5.5 Medium0%Sep 24, 2026
CVE-2026-96810: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Sep 24, 2026
CVE-2026-96803: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Sep 24, 2026
CVE-2026-96678: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 Low0%Sep 23, 2026
CVE-2026-67405: Missing Origin Validation in WebSocketsN/A5.3 Medium0%Sep 23, 2026
CVE-2026-67220: Uncontrolled Resource ConsumptionN/A6.0 Medium0%Sep 23, 2026
CVE-2026-66077: Improper Neutralization of Input During Web Page GenerationN/A7.3 High0%Sep 23, 2026
CVE-2026-96552: Use of a One-Way Hash without a Salt3.1 Low1.3 Low0%Sep 23, 2026
CVE-2026-96551: Cross-Site Request Forgery (CSRF)4.3 Medium2.1 Low0%Sep 23, 2026
CVE-2026-96550: Cleartext Transmission of Sensitive Information3.7 Low2.9 Low0%Sep 23, 2026
CVE-2026-84683: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Sep 23, 2026
CVE-2026-96549: Cleartext Storage of Sensitive Information3.3 Low1.9 Low0%Sep 23, 2026
CVE-2026-77423: Inefficient Regular Expression Complexity7.5 HighN/A0%Sep 23, 2026
CVE-2026-77422: Inefficient Regular Expression Complexity7.5 HighN/A0%Sep 23, 2026
CVE-2026-77421: Inefficient Regular Expression Complexity6.5 MediumN/A0%Sep 23, 2026
CVE-2026-77420: Inefficient Regular Expression Complexity5.5 MediumN/A0%Sep 23, 2026
CVE-2026-61695: Improper Validation of Array Index7.5 HighN/A1%Sep 23, 2026
CVE-2026-59990: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Sep 23, 2026
CVE-2026-96759: Improper Control of Generation of Code9.8 Critical9.3 Critical0%Sep 23, 2026
CVE-2026-96757: Improper Control of Generation of Code9.8 Critical9.3 Critical1%Sep 23, 2026
CVE-2026-96755: Improper Control of Generation of Code9.8 Critical9.3 Critical0%Sep 23, 2026
CVE-2026-96754: Improper Control of Generation of Code9.8 Critical9.3 Critical0%Sep 23, 2026
526-550 of 16386
‹›