The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-45343: Improper Neutralization of Input During Web Page GenerationN/A8.5 High0%May 28, 2026
CVE-2026-9645: Improper Neutralization of Special Elements used in an OS Command9.9 CriticalN/A1%May 28, 2026
CVE-2026-44657: Improper Neutralization of Input During Web Page GenerationN/A7.5 High0%May 28, 2026
CVE-2026-46509: Improperly Controlled Modification of Object Prototype Attributes8.2 HighN/A0%May 28, 2026
CVE-2026-45348: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%May 28, 2026
CVE-2026-45323: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A0%May 28, 2026
CVE-2026-43898: Improper Control of Generation of Code10.0 CriticalN/A1%May 28, 2026
CVE-2026-47676: Inconsistent Interpretation of HTTP Requests5.3 MediumN/A0%May 28, 2026
CVE-2026-47675: Improper Neutralization of CRLF Sequences in HTTP Headers5.3 MediumN/A0%May 28, 2026
CVE-2026-47674: Incorrect Regular Expression5.3 MediumN/A0%May 28, 2026
CVE-2026-47673: Improper Authorization6.5 MediumN/A0%May 28, 2026
CVE-2026-47760: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 28, 2026
CVE-2026-9806: Improper Neutralization of Input During Web Page GenerationN/A6.3 Medium0%May 28, 2026
CVE-2026-7797: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%May 28, 2026
CVE-2026-5737: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%May 28, 2026
CVE-2026-42877: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 27, 2026
CVE-2026-42197: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%May 27, 2026
CVE-2026-46426: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%May 27, 2026
CVE-2026-45719: Improper Control of Generation of Code6.5 MediumN/A0%May 27, 2026
CVE-2026-44521: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%May 27, 2026
CVE-2026-47119: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%May 27, 2026
CVE-2026-44902: Improper Handling of Exceptional Conditions7.5 HighN/A0%May 27, 2026
CVE-2026-42280: Incorrect Authorization7.1 HighN/A0%May 27, 2026
CVE-2025-3633: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%May 27, 2026
CVE-2026-3375: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%May 27, 2026
1826-1850 of 10596
‹›