The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-39878: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%Jul 20, 2026
CVE-2026-26483: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 20, 2026
CVE-2026-35198: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A0%Jul 20, 2026
CVE-2026-32822: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 MediumN/A0%Jul 20, 2026
CVE-2026-59238: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium1%Jul 20, 2026
CVE-2026-46516: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Jul 20, 2026
CVE-2026-63762: NULL Pointer DereferenceN/A6.0 Medium0%Jul 20, 2026
CVE-2026-2445: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 20, 2026
CVE-2026-9833: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 20, 2026
CVE-2026-57857: Improper Neutralization of Input During Web Page Generation4.3 Medium5.1 Medium0%Jul 18, 2026
CVE-2026-12228: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 18, 2026
CVE-2025-71396: Allocation of Resources Without Limits or ThrottlingN/A2.3 Low1%Jul 18, 2026
CVE-2025-71393: Uncontrolled RecursionN/A6.0 Medium0%Jul 18, 2026
CVE-2026-54335: Improperly Controlled Modification of Object Prototype Attributes3.7 LowN/A0%Jul 17, 2026
CVE-2026-54466: Improper Handling of Length Parameter Inconsistency7.5 High9.2 Critical0%Jul 17, 2026
CVE-2026-48015: Improper Neutralization of Input During Web Page Generation4.9 MediumN/A0%Jul 17, 2026
CVE-2026-9588: Improper Neutralization of Input During Web Page GenerationN/A7.0 High0%Jul 17, 2026
CVE-2026-9585: Improper Neutralization of Input During Web Page GenerationN/A8.6 High0%Jul 17, 2026
CVE-2026-49216: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Jul 17, 2026
CVE-2026-49215: Cross-Site Request Forgery (CSRF)5.4 Medium2.1 Low0%Jul 17, 2026
CVE-2026-49212: Insufficient Verification of Data Authenticity7.5 High6.9 Medium0%Jul 17, 2026
CVE-2026-49211: Exposure of Sensitive Information to an Unauthorized Actor7.5 High6.9 Medium0%Jul 17, 2026
CVE-2026-49210: Improper Neutralization of Input During Web Page Generation6.1 Medium2.3 Low0%Jul 17, 2026
CVE-2026-49209: Allocation of Resources Without Limits or Throttling6.5 Medium5.3 Medium0%Jul 17, 2026
CVE-2026-49208: Improper Input Validation5.3 Medium6.9 Medium0%Jul 17, 2026
1326-1350 of 10594
‹›