The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-73531: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Aug 13, 2026
CVE-2026-73651: Improper Control of Generation of Code5.7 MediumN/A0%Aug 13, 2026
CVE-2026-73650: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Aug 13, 2026
CVE-2026-73038: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Aug 13, 2026
CVE-2026-73037: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Aug 13, 2026
CVE-2026-73649: Improper Control of Generation of Code9.8 CriticalN/A1%Aug 13, 2026
CVE-2026-73647: Improperly Controlled Modification of Object Prototype Attributes5.6 MediumN/A0%Aug 13, 2026
CVE-2026-73644: Improper Authorization9.6 CriticalN/A0%Aug 13, 2026
CVE-2026-73643: Inefficient Algorithmic Complexity7.5 HighN/A0%Aug 13, 2026
CVE-2026-73567: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)9.1 CriticalN/A0%Aug 13, 2026
CVE-2026-73671: URL Redirection to Untrusted Site6.1 Medium5.1 Medium0%Aug 13, 2026
CVE-2026-73572: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 13, 2026
CVE-2026-19744: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 13, 2026
CVE-2026-49856: Server-Side Request Forgery (SSRF)4.3 MediumN/A0%Aug 13, 2026
CVE-2026-19716: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 13, 2026
CVE-2025-62318: Cross-Site Request Forgery (CSRF)3.7 LowN/A0%Aug 13, 2026
CVE-2026-73628: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Aug 13, 2026
CVE-2026-73617: Improper Neutralization of Special Elements in Data Query Logic7.1 High7.1 High0%Aug 13, 2026
CVE-2026-73602: Improper Neutralization of Directives in Dynamically Evaluated Code9.9 Critical9.0 Critical1%Aug 13, 2026
CVE-2026-73483: Improper Neutralization of Special Elements used in an OS Command8.8 High9.4 Critical1%Aug 13, 2026
CVE-2026-19481: Improper Check for Unusual or Exceptional Conditions7.5 HighN/A0%Aug 13, 2026
CVE-2026-19135: Use of Externally-Controlled Input to Select Classes or Code5.4 MediumN/A0%Aug 13, 2026
CVE-2026-48791: Improper Verification of Cryptographic Signature2.0 LowN/A0%Aug 13, 2026
CVE-2026-73492: Improper Neutralization of Input During Web Page GenerationN/A2.3 Low0%Aug 12, 2026
CVE-2026-73491: Incomplete List of Disallowed InputsN/A2.3 Low0%Aug 12, 2026
1401-1425 of 16389
‹›