The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-55847: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 14, 2026
CVE-2026-54087: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Sep 14, 2026
CVE-2026-59960: Improper Neutralization of Special Elements used in an OS Command7.5 HighN/A1%Sep 14, 2026
CVE-2026-55451: Improperly Controlled Modification of Object Prototype AttributesN/A8.3 High0%Sep 14, 2026
CVE-2026-53496: Uncaught Exception5.3 MediumN/A1%Sep 14, 2026
CVE-2026-61534: Improperly Controlled Modification of Object Prototype Attributes9.1 CriticalN/A1%Sep 14, 2026
CVE-2026-4103: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 14, 2026
CVE-2026-82019: Improper Neutralization of Input During Web Page Generation4.2 Medium2.3 Low0%Sep 14, 2026
CVE-2026-90957: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Sep 14, 2026
CVE-2026-90931: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Sep 14, 2026
CVE-2026-88853: Improper Neutralization of Input During Web Page GenerationN/A7.5 High0%Sep 14, 2026
CVE-2026-85191: Improper Neutralization of Input During Web Page GenerationN/A7.5 High0%Sep 14, 2026
CVE-2026-85189: Improper Neutralization of Input During Web Page GenerationN/A7.5 High0%Sep 14, 2026
CVE-2025-63842: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 14, 2026
CVE-2025-64059: Improper Neutralization of Input During Web Page Generation1.8 LowN/A0%Sep 13, 2026
CVE-2026-90772: Improper Neutralization of Input During Web Page Generation7.6 High8.3 High0%Sep 13, 2026
CVE-2026-87888: Improper Neutralization of Input During Web Page Generation8.0 HighN/A0%Sep 12, 2026
CVE-2026-89268: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Sep 12, 2026
CVE-2026-81911: Improper Neutralization of Input During Web Page Generation5.4 Medium5.8 Medium0%Sep 11, 2026
CVE-2026-79035: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 11, 2026
CVE-2026-89255: Improper Neutralization of Input During Web Page Generation8.7 High9.3 Critical0%Sep 11, 2026
CVE-2026-89253: Improper Neutralization of Input During Web Page Generation8.7 High9.3 Critical0%Sep 11, 2026
CVE-2026-89243: Improper Neutralization of Input During Web Page Generation8.1 High9.2 Critical0%Sep 11, 2026
CVE-2026-89240: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Sep 11, 2026
CVE-2026-89239: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Sep 11, 2026
601-625 of 10596
‹›