The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-110077: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-110076: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-110075: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-110074: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-110073: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-110037: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109415: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-107682: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-107305: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-106633: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-106632: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-106631: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-106630: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Oct 13, 2026
CVE-2026-106629: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Oct 13, 2026
CVE-2026-106628: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-92922: Adobe: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…8.1 HighN/A1%Oct 13, 2026
CVE-2026-92911: Adobe: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…8.7 HighN/A1%Oct 13, 2026
CVE-2026-91013: Adobe: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to…9.3 CriticalN/A1%Oct 13, 2026
CVE-2026-84994: QwikDev, @builder.io qwik: Qwik is a performance-focused JavaScript frameworkN/A8.7 High1%Oct 13, 2026
CVE-2026-54086: esa sleapi-j: SLE API for Java is an implementation of CCSDS Space Link Extension Services5.3 MediumN/A0%Oct 13, 2026
CVE-2026-110239: Improper Neutralization of Input During Web Page Generation4.4 Medium2.1 Low0%Oct 13, 2026
CVE-2026-110224: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 13, 2026
CVE-2026-110221: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 13, 2026
CVE-2026-110219: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 13, 2026
CVE-2026-104937: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
76-100 of 16381
‹›