The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-24752: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Jun 1, 2026
CVE-2026-24751: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Jun 1, 2026
CVE-2026-9309: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 1, 2026
CVE-2026-9308: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 1, 2026
CVE-2026-48559: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Jun 1, 2026
CVE-2026-40545: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Jun 1, 2026
CVE-2026-40544: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Jun 1, 2026
CVE-2026-48209: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jun 1, 2026
CVE-2026-48208: Uncontrolled Resource Consumption6.5 MediumN/A0%Jun 1, 2026
CVE-2026-44287: Improper Control of Generation of Code6.3 MediumN/A0%May 29, 2026
CVE-2026-45628: Improper Input Validation9.6 CriticalN/A0%May 29, 2026
CVE-2026-45627: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%May 29, 2026
CVE-2026-33386: Improper Neutralization of Input During Web Page GenerationN/A2.3 Low0%May 29, 2026
CVE-2018-25384: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%May 29, 2026
CVE-2026-41159: Improper Control of Generation of Code5.3 Medium5.3 Medium0%May 29, 2026
CVE-2026-41150: Loop with Unreachable Exit Condition5.3 Medium5.3 Medium0%May 29, 2026
CVE-2026-47694: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 29, 2026
CVE-2026-45580: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 29, 2026
CVE-2026-44698: Improper Control of Generation of Code8.3 HighN/A0%May 29, 2026
CVE-2026-45551: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%May 29, 2026
CVE-2026-10058: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%May 29, 2026
CVE-2026-10057: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%May 29, 2026
CVE-2026-8732: Missing Authentication for Critical Function9.8 CriticalN/A0%May 29, 2026
CVE-2026-6275: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%May 29, 2026
CVE-2026-7430: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%May 29, 2026
1801-1825 of 10596
‹›