The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-78838: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 8, 2026
CVE-2026-73319: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Sep 8, 2026
CVE-2026-86550: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 8, 2026
CVE-2026-58113: Improper Neutralization of Input During Web Page Generation6.1 Medium8.5 High0%Sep 8, 2026
CVE-2026-86513: Allocation of Resources Without Limits or Throttling5.3 Medium5.5 Medium1%Sep 8, 2026
CVE-2026-86512: Improper Access Control6.3 Medium2.1 Low0%Sep 8, 2026
CVE-2026-86511: Uncontrolled Resource Consumption5.3 Medium5.5 Medium1%Sep 8, 2026
CVE-2026-66768: Reliance on Untrusted Inputs in a Security Decision9.0 CriticalN/A1%Sep 8, 2026
CVE-2026-86321: Server-Side Request Forgery (SSRF)5.3 Medium5.5 Medium1%Sep 7, 2026
CVE-2026-86319: Uncontrolled Resource Consumption5.3 Medium5.5 Medium1%Sep 7, 2026
CVE-2026-86318: Stack-based Buffer Overflow5.3 Medium5.5 Medium1%Sep 7, 2026
CVE-2026-86440: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Sep 7, 2026
CVE-2026-86431: Improper Neutralization of Input During Web Page Generation7.2 High6.9 Medium0%Sep 7, 2026
CVE-2026-78325: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium0%Sep 7, 2026
CVE-2026-86284: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium5.5 Medium1%Sep 7, 2026
CVE-2026-86282: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Sep 7, 2026
CVE-2026-86274: Missing Authorization5.3 Medium5.5 Medium1%Sep 7, 2026
CVE-2026-86273: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Sep 7, 2026
CVE-2026-86315: Numeric Truncation Error6.2 MediumN/A0%Sep 7, 2026
CVE-2026-86264: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Sep 7, 2026
CVE-2026-86263: Authorization Bypass Through User-Controlled Key7.3 High5.5 Medium1%Sep 7, 2026
CVE-2026-86262: Authorization Bypass Through User-Controlled Key7.3 High5.5 Medium1%Sep 7, 2026
CVE-2026-86261: Authorization Bypass Through User-Controlled Key7.3 High5.5 Medium1%Sep 7, 2026
CVE-2026-86260: Unverified Password Change6.5 Medium5.5 Medium1%Sep 7, 2026
CVE-2026-86231: Improper Check for Certificate Revocation3.7 Low2.9 Low0%Sep 6, 2026
1026-1050 of 16386
‹›