The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-78213: Improper Neutralization of Input During Web Page Generation8.7 High6.2 Medium0%Aug 24, 2026
CVE-2026-78166: Improper Control of Generation of Code6.3 Medium2.1 Low0%Aug 24, 2026
CVE-2026-78140: Improper Neutralization of Special Elements Used in a Template Engine4.7 Medium2.0 Low0%Aug 23, 2026
CVE-2026-5388: Improper Input Validation9.8 Critical9.3 Critical1%Aug 23, 2026
CVE-2026-62243: Improper Validation of Certificate with Host Mismatch7.5 High8.7 High0%Aug 22, 2026
CVE-2026-76789: Improper Neutralization of Input During Web Page Generation8.8 HighN/A1%Aug 22, 2026
CVE-2026-16260: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Aug 22, 2026
CVE-2026-53529: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Aug 21, 2026
CVE-2026-43980: Improper Neutralization of Input During Web Page Generation6.3 MediumN/A0%Aug 21, 2026
CVE-2026-77811: Improper Neutralization of Input During Web Page Generation8.7 High6.2 Medium1%Aug 21, 2026
CVE-2026-76904: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A4%Aug 21, 2026
CVE-2026-69236: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 21, 2026
CVE-2026-69234: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 21, 2026
CVE-2026-69232: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Aug 21, 2026
CVE-2026-69231: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Aug 21, 2026
CVE-2026-63135: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Aug 21, 2026
CVE-2026-61824: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Aug 21, 2026
CVE-2026-50290: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Aug 21, 2026
CVE-2026-55850: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium1%Aug 21, 2026
CVE-2026-35163: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)N/A4.6 Medium0%Aug 21, 2026
CVE-2026-75933: Improper Neutralization of Input During Web Page Generation7.3 High8.5 High0%Aug 21, 2026
CVE-2026-18409: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 21, 2026
CVE-2026-49436: Improper Neutralization of Input During Web Page Generation7.3 HighN/A0%Aug 20, 2026
CVE-2026-40345: Uncontrolled RecursionN/A8.2 High1%Aug 20, 2026
CVE-2026-73220: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)N/A8.5 High0%Aug 20, 2026
1251-1275 of 16388
‹›