The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-47951: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-47950: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-47949: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-47948: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-47947: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-47946: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-47945: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-47944: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-47943: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-47942: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-47941: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-47939: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-47936: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-47935: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-46492: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 MediumN/A0%Jun 9, 2026
CVE-2026-42599: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jun 9, 2026
CVE-2026-42570: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Jun 9, 2026
CVE-2026-34692: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 9, 2026
CVE-2026-9279: Improper Neutralization of Special Elements used in an OS CommandN/A8.7 High0%Jun 9, 2026
CVE-2026-47901: Improper Neutralization of Input During Web Page GenerationN/A4.6 Medium0%Jun 9, 2026
CVE-2026-47900: Improper Neutralization of Input During Web Page GenerationN/A4.6 Medium0%Jun 9, 2026
CVE-2026-47899: Exposed Dangerous Method or FunctionN/A8.7 High0%Jun 9, 2026
CVE-2026-41031: Improper Neutralization of Input During Web Page Generation8.7 High9.3 Critical0%Jun 9, 2026
CVE-2026-8981: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Jun 9, 2026
CVE-2026-8907: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%Jun 9, 2026
1726-1750 of 10596
‹›