The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-73043: Improper Neutralization of Input During Web Page Generation9.0 Critical9.4 Critical0%Aug 15, 2026
CVE-2026-14230: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 15, 2026
CVE-2026-14484: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A1%Aug 15, 2026
CVE-2026-50029: Incorrect Comparison5.3 MediumN/A0%Aug 14, 2026
CVE-2026-53472: Improper Neutralization of Input During Web Page Generation6.3 MediumN/A0%Aug 14, 2026
CVE-2026-14290: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Aug 14, 2026
CVE-2026-73428: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Aug 13, 2026
CVE-2026-18741: Improper Neutralization of Input During Web Page Generation4.8 Medium4.6 Medium0%Aug 13, 2026
CVE-2026-73531: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Aug 13, 2026
CVE-2026-73651: Improper Control of Generation of Code5.7 MediumN/A0%Aug 13, 2026
CVE-2026-73650: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Aug 13, 2026
CVE-2026-73038: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Aug 13, 2026
CVE-2026-73037: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Aug 13, 2026
CVE-2026-73649: Improper Control of Generation of Code9.8 CriticalN/A1%Aug 13, 2026
CVE-2026-73647: Improperly Controlled Modification of Object Prototype Attributes5.6 MediumN/A0%Aug 13, 2026
CVE-2026-73643: Inefficient Algorithmic Complexity7.5 HighN/A0%Aug 13, 2026
CVE-2026-73567: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)9.1 CriticalN/A0%Aug 13, 2026
CVE-2026-73671: URL Redirection to Untrusted Site6.1 Medium5.1 Medium0%Aug 13, 2026
CVE-2026-73572: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 13, 2026
CVE-2026-19744: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 13, 2026
CVE-2026-49856: Server-Side Request Forgery (SSRF)4.3 MediumN/A0%Aug 13, 2026
CVE-2026-19716: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 13, 2026
CVE-2025-62318: Cross-Site Request Forgery (CSRF)3.7 LowN/A0%Aug 13, 2026
CVE-2026-73628: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Aug 13, 2026
CVE-2026-73617: Improper Neutralization of Special Elements in Data Query Logic7.1 High7.1 High0%Aug 13, 2026
1026-1050 of 10594
‹›