The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-26462: Improper Neutralization of Special Elements used in an Expression Language Statement7.3 HighN/A0%May 18, 2026
CVE-2026-3471: Improper Authorization in Handler for Custom URL Scheme6.5 MediumN/A0%May 18, 2026
CVE-2018-25331: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%May 17, 2026
CVE-2021-47981: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%May 16, 2026
CVE-2021-47975: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%May 16, 2026
CVE-2021-47955: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%May 16, 2026
CVE-2020-37240: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 16, 2026
CVE-2020-37238: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 16, 2026
CVE-2020-37236: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 16, 2026
CVE-2020-37235: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 16, 2026
CVE-2026-44721: Improper Neutralization of Input During Web Page Generation7.3 HighN/A0%May 15, 2026
CVE-2026-44568: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%May 15, 2026
CVE-2026-46367: Improper Neutralization of Input During Web Page Generation7.6 High8.3 High0%May 15, 2026
CVE-2026-46361: Improper Neutralization of Input During Web Page Generation6.9 Medium8.2 High0%May 15, 2026
CVE-2026-46360: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%May 15, 2026
CVE-2026-45622: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%May 15, 2026
CVE-2021-47968: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 15, 2026
CVE-2021-47967: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%May 15, 2026
CVE-2021-47963: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%May 15, 2026
CVE-2021-47962: Improper Neutralization of Input During Web Page Generation6.4 Medium5.1 Medium0%May 15, 2026
CVE-2026-23695: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%May 15, 2026
CVE-2026-46508: Improper Neutralization of Special Elements used in a Command7.8 High8.4 High0%May 15, 2026
CVE-2026-45773: Cross-Site Request Forgery (CSRF)6.5 Medium5.1 Medium0%May 15, 2026
CVE-2026-45772: Untrusted Search Path9.8 Critical0.0 None0%May 15, 2026
CVE-2026-41553: Improper Neutralization of Special Elements used in an OS Command10.0 Critical10.0 Critical0%May 15, 2026
1926-1950 of 10601
‹›