The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-78222: NULL Pointer Dereference7.5 High8.7 High1%Sep 2, 2026
CVE-2026-18329: Not Failing Securely8.2 High8.8 High0%Sep 2, 2026
CVE-2026-19698: Improper Neutralization of Special Elements in Output Used by a Downstream Component3.5 LowN/A0%Sep 2, 2026
CVE-2026-84803: Improper Neutralization of Input During Web Page Generation9.0 Critical8.6 High0%Sep 2, 2026
CVE-2026-84793: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Sep 2, 2026
CVE-2026-75528: Improper Neutralization of Input During Web Page Generation7.2 HighN/A1%Sep 2, 2026
CVE-2026-3850: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 2, 2026
CVE-2026-19723: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Sep 2, 2026
CVE-2026-19719: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Sep 2, 2026
CVE-2026-12865: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Sep 2, 2026
CVE-2026-84375: Uncontrolled Resource Consumption7.5 HighN/A1%Sep 1, 2026
CVE-2026-84368: Improperly Controlled Modification of Object Prototype Attributes3.7 LowN/A0%Sep 1, 2026
CVE-2026-84367: Improperly Controlled Modification of Object Prototype Attributes3.7 LowN/A0%Sep 1, 2026
CVE-2026-84365: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Sep 1, 2026
CVE-2026-84364: Uncontrolled Resource Consumption5.3 MediumN/A1%Sep 1, 2026
CVE-2026-84363: Inconsistent Interpretation of HTTP Requests5.9 MediumN/A0%Sep 1, 2026
CVE-2026-84232: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 1, 2026
CVE-2026-83619: Uncontrolled Resource ConsumptionN/A8.7 High1%Sep 1, 2026
CVE-2026-83618: XML Injection (aka Blind XPath Injection)N/A8.7 High1%Sep 1, 2026
CVE-2026-83617: XML Injection (aka Blind XPath Injection)N/A8.7 High1%Sep 1, 2026
CVE-2026-83616: XML Injection (aka Blind XPath Injection)N/A8.7 High1%Sep 1, 2026
CVE-2026-83615: Allocation of Resources Without Limits or ThrottlingN/A8.7 High1%Sep 1, 2026
CVE-2026-83614: Uncontrolled Resource ConsumptionN/A8.7 High1%Sep 1, 2026
CVE-2026-83613: Inefficient Algorithmic ComplexityN/A8.7 High1%Sep 1, 2026
CVE-2026-83612: Improper Handling of Case SensitivityN/A8.7 High1%Sep 1, 2026
1101-1125 of 16386
‹›