The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-75528: Improper Neutralization of Input During Web Page Generation7.2 HighN/A1%Sep 2, 2026
CVE-2026-3850: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 2, 2026
CVE-2026-19723: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Sep 2, 2026
CVE-2026-19719: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Sep 2, 2026
CVE-2026-12865: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Sep 2, 2026
CVE-2026-84375: Uncontrolled Resource Consumption7.5 HighN/A1%Sep 1, 2026
CVE-2026-84368: Improperly Controlled Modification of Object Prototype Attributes3.7 LowN/A0%Sep 1, 2026
CVE-2026-84367: Improperly Controlled Modification of Object Prototype Attributes3.7 LowN/A0%Sep 1, 2026
CVE-2026-84365: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Sep 1, 2026
CVE-2026-84364: Uncontrolled Resource Consumption5.3 MediumN/A1%Sep 1, 2026
CVE-2026-84363: Inconsistent Interpretation of HTTP Requests5.9 MediumN/A0%Sep 1, 2026
CVE-2026-84232: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 1, 2026
CVE-2026-83619: Uncontrolled Resource ConsumptionN/A8.7 High1%Sep 1, 2026
CVE-2026-83618: XML Injection (aka Blind XPath Injection)N/A8.7 High1%Sep 1, 2026
CVE-2026-83617: XML Injection (aka Blind XPath Injection)N/A8.7 High1%Sep 1, 2026
CVE-2026-83616: XML Injection (aka Blind XPath Injection)N/A8.7 High1%Sep 1, 2026
CVE-2026-83615: Allocation of Resources Without Limits or ThrottlingN/A8.7 High1%Sep 1, 2026
CVE-2026-83614: Uncontrolled Resource ConsumptionN/A8.7 High1%Sep 1, 2026
CVE-2026-83613: Inefficient Algorithmic ComplexityN/A8.7 High1%Sep 1, 2026
CVE-2026-83612: Improper Handling of Case SensitivityN/A8.7 High1%Sep 1, 2026
CVE-2026-83611: Improper Validation of Syntactic Correctness of InputN/A6.9 Medium1%Sep 1, 2026
CVE-2026-83610: Improper Encoding or Escaping of OutputN/A6.3 Medium1%Sep 1, 2026
CVE-2026-83609: XML Injection (aka Blind XPath Injection)N/A8.7 High1%Sep 1, 2026
CVE-2026-83608: XML Injection (aka Blind XPath Injection)N/A8.7 High1%Sep 1, 2026
CVE-2026-83607: XML Injection (aka Blind XPath Injection)N/A8.7 High1%Sep 1, 2026
826-850 of 10596
‹›