The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-45118: Improper Neutralization of Script in Attributes in a Web Page9.3 CriticalN/A1%Aug 18, 2026
CVE-2026-45116: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Aug 18, 2026
CVE-2026-45115: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Aug 18, 2026
CVE-2026-73426: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Aug 18, 2026
CVE-2026-71539: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A8.9 High0%Aug 18, 2026
CVE-2026-59949: NULL Pointer Dereference6.5 MediumN/A0%Aug 18, 2026
CVE-2026-74984: Concurrent Execution using Shared Resource with Improper Synchronization6.8 MediumN/A0%Aug 18, 2026
CVE-2026-74976: Access of Resource Using Incompatible Type6.5 MediumN/A0%Aug 18, 2026
CVE-2026-74938: Protection Mechanism Failure9.1 CriticalN/A0%Aug 18, 2026
CVE-2026-74937: Use After Free8.8 HighN/A0%Aug 18, 2026
CVE-2026-74936: Use After Free9.8 CriticalN/A0%Aug 18, 2026
CVE-2026-23938: Uncaught Exception4.9 Medium2.1 Low0%Aug 18, 2026
CVE-2026-23935: Out-of-bounds Read4.9 Medium6.8 Medium0%Aug 18, 2026
CVE-2026-75851: Improper Privilege Management9.9 Critical9.4 Critical0%Aug 18, 2026
CVE-2026-75843: Improper Privilege Management9.9 Critical9.4 Critical0%Aug 18, 2026
CVE-2026-75840: Comparison Using Wrong Factors7.5 High8.7 High0%Aug 18, 2026
CVE-2026-75834: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Aug 18, 2026
CVE-2026-75831: Improper Neutralization of Input During Web Page Generation7.6 High5.1 Medium0%Aug 18, 2026
CVE-2026-75107: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Aug 18, 2026
CVE-2026-15371: Improper Handling of URL Encoding (Hex Encoding)8.1 HighN/A0%Aug 18, 2026
CVE-2026-67919: Improper Control of Generation of Code9.8 CriticalN/A0%Aug 17, 2026
CVE-2026-75531: Improper Neutralization of Input During Web Page GenerationN/A7.0 High0%Aug 17, 2026
CVE-2026-74234: Undefined Security Weakness7.7 High5.1 Medium0%Aug 17, 2026
CVE-2026-57485: Exposure of Sensitive Information to an Unauthorized Actor8.5 HighN/A0%Aug 17, 2026
CVE-2026-55674: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Aug 17, 2026
1351-1375 of 16389
‹›