The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-81876: Improper Input Validation7.5 HighN/A1%Sep 16, 2026
CVE-2026-81875: Improper Input Validation7.5 HighN/A1%Sep 16, 2026
CVE-2026-81176: Allocation of Resources Without Limits or Throttling5.3 MediumN/A1%Sep 16, 2026
CVE-2026-75516: Allocation of Resources Without Limits or ThrottlingN/A8.7 High1%Sep 16, 2026
CVE-2026-63325: Improper Control of Generation of Code7.8 HighN/A0%Sep 16, 2026
CVE-2026-63126: Integer Overflow or Wraparound7.5 HighN/A1%Sep 16, 2026
CVE-2026-88593: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 16, 2026
CVE-2026-84397: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Sep 16, 2026
CVE-2026-92402: Missing Authorization6.3 Medium5.3 Medium0%Sep 16, 2026
CVE-2026-85386: Improper Neutralization of Input During Web Page Generation6.1 Medium7.3 High0%Sep 16, 2026
CVE-2026-20307: Deserialization of Untrusted Data9.9 CriticalN/A1%Sep 16, 2026
CVE-2026-84858: Improper Control of Generation of Code8.8 HighN/A1%Sep 16, 2026
CVE-2026-63671: Improper Neutralization of Input During Web Page Generation8.1 HighN/A0%Sep 16, 2026
CVE-2026-92135: Improper Neutralization of Input During Web Page Generation8.0 HighN/A0%Sep 16, 2026
CVE-2026-92134: Improper Neutralization of Input During Web Page Generation8.0 HighN/A0%Sep 16, 2026
CVE-2026-59969: Improper Validation of Certificate with Host Mismatch7.5 HighN/A0%Sep 16, 2026
CVE-2026-19619: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Sep 16, 2026
CVE-2026-86784: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Sep 16, 2026
CVE-2026-86444: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Sep 16, 2026
CVE-2026-84088: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Sep 16, 2026
CVE-2026-15639: Improper Neutralization of Input During Web Page GenerationN/A9.3 Critical0%Sep 16, 2026
CVE-2026-83408: Improper Control of Generation of Code8.1 HighN/A0%Sep 15, 2026
CVE-2026-83368: Improper Access Control7.0 HighN/A0%Sep 15, 2026
CVE-2026-83357: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A0%Sep 15, 2026
CVE-2026-92234: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Sep 15, 2026
701-725 of 16386
‹›