The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-73231: Improper Neutralization of Directives in Dynamically Evaluated Code7.8 HighN/A0%Aug 11, 2026
CVE-2026-73032: Improper Control of Generation of Code9.6 Critical9.4 Critical1%Aug 11, 2026
CVE-2026-73031: Improper Neutralization of Input During Web Page Generation8.7 High8.2 High1%Aug 11, 2026
CVE-2026-66146: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 11, 2026
CVE-2026-18708: Improper Control of Generation of Code6.4 Medium5.3 Medium0%Aug 11, 2026
CVE-2026-48414: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Aug 11, 2026
CVE-2026-48413: Improper Neutralization of Input During Web Page Generation8.7 HighN/A1%Aug 11, 2026
CVE-2026-73086: Integer Overflow or Wraparound7.4 HighN/A0%Aug 11, 2026
CVE-2026-73084: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 11, 2026
CVE-2026-21269: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 11, 2026
CVE-2026-72925: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 11, 2026
CVE-2026-19434: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 11, 2026
CVE-2026-72764: Exposure of Resource to Wrong Sphere8.8 High5.8 Medium1%Aug 11, 2026
CVE-2026-72747: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%Aug 11, 2026
CVE-2026-72559: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 11, 2026
CVE-2026-72553: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 11, 2026
CVE-2026-19418: Origin Validation ErrorN/A7.3 High0%Aug 11, 2026
CVE-2026-24330: Unrestricted Upload of File with Dangerous Type6.5 MediumN/A1%Aug 11, 2026
CVE-2026-58235: Dependency on Vulnerable Third-Party Component6.3 MediumN/A0%Aug 11, 2026
CVE-2026-48161: Embedded Malicious CodeN/A9.3 Critical1%Aug 10, 2026
CVE-2026-72743: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Aug 10, 2026
CVE-2026-48160: Embedded Malicious CodeN/A9.3 Critical1%Aug 10, 2026
CVE-2026-44401: Improper Neutralization of Input During Web Page Generation4.8 Medium4.6 Medium0%Aug 10, 2026
CVE-2026-48159: Embedded Malicious CodeN/A9.3 Critical1%Aug 10, 2026
CVE-2026-48158: Embedded Malicious CodeN/A9.3 Critical1%Aug 10, 2026
1451-1475 of 16389
‹›