The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-87811: Improper Neutralization of Input During Web Page Generation7.3 High8.4 High0%Sep 9, 2026
CVE-2025-7062: Improper Neutralization of Input During Web Page GenerationN/A5.2 Medium0%Sep 9, 2026
CVE-2026-80340: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Sep 9, 2026
CVE-2026-80339: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Sep 9, 2026
CVE-2026-53939: Use of Hard-coded Cryptographic Key9.1 CriticalN/A0%Sep 9, 2026
CVE-2026-53938: Heap-based Buffer Overflow8.2 HighN/A0%Sep 9, 2026
CVE-2026-86076: Improper Control of Generation of Code8.8 High8.7 High0%Sep 8, 2026
CVE-2026-85630: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 8, 2026
CVE-2026-85485: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 8, 2026
CVE-2026-85484: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 8, 2026
CVE-2026-84942: Improper Neutralization of Input During Web Page Generation8.7 High6.3 Medium0%Sep 8, 2026
CVE-2026-84197: Improper Certificate ValidationN/A9.2 Critical0%Sep 8, 2026
CVE-2026-79905: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2026-76002: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Sep 8, 2026
CVE-2026-75742: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2026-75741: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2026-75740: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2026-75739: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2026-75738: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2026-75737: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2026-75736: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2026-75735: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2026-75734: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2026-75733: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2026-75731: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
651-675 of 10596
‹›