The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-12894: Improper Neutralization of Special Elements Used in a Template Engine8.8 HighN/A1%Aug 31, 2026
CVE-2026-82881: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Aug 31, 2026
CVE-2026-82868: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Aug 31, 2026
CVE-2026-82867: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Aug 31, 2026
CVE-2026-82865: Improper Neutralization of Input During Web Page Generation4.4 Medium2.1 Low0%Aug 31, 2026
CVE-2026-82838: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)N/A6.4 Medium0%Aug 31, 2026
CVE-2026-82630: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium1%Aug 31, 2026
CVE-2026-82629: Unrestricted Upload of File with Dangerous Type4.7 Medium2.0 Low0%Aug 31, 2026
CVE-2026-82621: Authorization Bypass Through User-Controlled Key7.3 High5.5 Medium1%Aug 31, 2026
CVE-2026-82620: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 31, 2026
CVE-2026-77850: Improper Neutralization of Input During Web Page GenerationN/A8.4 High0%Aug 31, 2026
CVE-2026-75757: Reliance on Cookies without Validation and Integrity CheckingN/A8.3 High1%Aug 31, 2026
CVE-2026-82604: Uncontrolled Recursion4.3 Medium5.3 Medium1%Aug 31, 2026
CVE-2026-81315: Origin Validation ErrorN/A7.4 High0%Aug 31, 2026
CVE-2026-82596: Improper Restriction of Operations within the Bounds of a Memory Buffer3.3 Low1.9 Low0%Aug 31, 2026
CVE-2026-82646: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Aug 30, 2026
CVE-2026-82635: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Aug 30, 2026
CVE-2026-14835: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Aug 30, 2026
CVE-2026-55867: Authorization Bypass Through User-Controlled KeyN/A5.3 Medium1%Aug 28, 2026
CVE-2026-55860: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Aug 28, 2026
CVE-2026-55859: Improper Encoding or Escaping of Output5.9 MediumN/A0%Aug 28, 2026
CVE-2026-55858: Inappropriate Encoding for Output Context5.9 MediumN/A1%Aug 28, 2026
CVE-2026-55857: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Aug 28, 2026
CVE-2026-55856: Insufficiently Protected Credentials5.9 MediumN/A0%Aug 28, 2026
CVE-2026-55848: Improper Restriction of XML External Entity Reference8.6 HighN/A1%Aug 28, 2026
1151-1175 of 16388
‹›