The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-9656: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Jul 17, 2026
CVE-2026-62387: Permissive Cross-domain Policy with Untrusted Domains7.1 High7.1 High0%Jul 17, 2026
CVE-2026-45368: Improper Neutralization of Input During Web Page GenerationN/A8.4 High0%Jul 16, 2026
CVE-2026-63397: Improper Encoding or Escaping of Output6.4 Medium7.1 High0%Jul 16, 2026
CVE-2026-46562: Improper Control of Generation of Code9.8 CriticalN/A1%Jul 16, 2026
CVE-2026-53597: Improper Control of Generation of CodeN/A8.7 High1%Jul 16, 2026
CVE-2026-15099: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 16, 2026
CVE-2026-12869: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 16, 2026
CVE-2026-14987: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 16, 2026
CVE-2026-55445: Improper AuthenticationN/A9.3 Critical0%Jul 15, 2026
CVE-2026-54458: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A0%Jul 15, 2026
CVE-2026-50183: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Jul 15, 2026
CVE-2026-50182: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 15, 2026
CVE-2026-49279: Improper Neutralization of Input During Web Page GenerationN/A7.7 High0%Jul 15, 2026
CVE-2026-45738: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Jul 15, 2026
CVE-2026-54443: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)N/A5.9 Medium0%Jul 15, 2026
CVE-2026-40501: Inclusion of Functionality from Untrusted Control Sphere8.8 High8.6 High1%Jul 15, 2026
CVE-2026-9007: Improper Neutralization of Input During Web Page GenerationN/A5.5 Medium0%Jul 15, 2026
CVE-2026-45805: Exposed Dangerous Method or Function8.8 HighN/A0%Jul 15, 2026
CVE-2026-41580: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 15, 2026
CVE-2026-61453: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jul 15, 2026
CVE-2026-46637: Improper Encoding or Escaping of Output5.4 Medium5.1 Medium0%Jul 14, 2026
CVE-2026-49978: Improper Neutralization of Input During Web Page Generation6.1 Medium6.3 Medium1%Jul 14, 2026
CVE-2026-48816: Insufficient Verification of Data Authenticity6.5 MediumN/A0%Jul 14, 2026
CVE-2026-48815: Improper Verification of Cryptographic Signature7.5 HighN/A0%Jul 14, 2026
1351-1375 of 10594
‹›