The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-14292: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 1, 2026
CVE-2026-12696: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 1, 2026
CVE-2026-10827: Insufficient Verification of Data Authenticity3.5 LowN/A0%Aug 1, 2026
CVE-2025-15669: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Aug 1, 2026
CVE-2026-52232: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 31, 2026
CVE-2026-62324: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 31, 2026
CVE-2026-59232: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium1%Jul 31, 2026
CVE-2026-46594: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium1%Jul 31, 2026
CVE-2026-14833: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Jul 31, 2026
CVE-2026-13393: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Jul 31, 2026
CVE-2026-66421: Improper Neutralization of Input During Web Page Generation9.3 Critical8.8 High1%Jul 30, 2026
CVE-2026-61526: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 30, 2026
CVE-2025-51684: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 30, 2026
CVE-2025-0152: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 30, 2026
CVE-2026-48910: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.5 MediumN/A1%Jul 30, 2026
CVE-2025-36431: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 30, 2026
CVE-2025-36298: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 30, 2026
CVE-2026-59328: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 30, 2026
CVE-2026-14592: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 30, 2026
CVE-2026-14239: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 30, 2026
CVE-2026-14207: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 30, 2026
CVE-2026-13344: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jul 30, 2026
CVE-2026-13330: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 30, 2026
CVE-2026-67595: Embedded Malicious Code8.1 High9.2 Critical1%Jul 29, 2026
CVE-2026-3093: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Jul 29, 2026
1651-1675 of 16390
‹›