The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-5110: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%May 2, 2026
CVE-2026-5109: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%May 2, 2026
CVE-2025-69606: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%May 1, 2026
CVE-2026-37503: Improper Neutralization of Input During Web Page Generation6.9 MediumN/A0%May 1, 2026
CVE-2026-3346: Improper Neutralization of Special Elements used in an SQL Command6.4 MediumN/A0%Apr 30, 2026
CVE-2026-7429: Improper Neutralization of Input During Web Page Generation4.6 Medium2.1 Low0%Apr 30, 2026
CVE-2025-14576: Improper Control of Generation of Code7.8 High7.4 High0%Apr 30, 2026
CVE-2026-1493: Improper Neutralization of Input During Web Page Generation5.4 Medium4.6 Medium0%Apr 30, 2026
CVE-2026-6498: Insufficient Verification of Data Authenticity5.3 MediumN/A0%Apr 30, 2026
CVE-2018-25309: Improper Neutralization of Input During Web Page Generation7.2 High5.1 Medium0%Apr 29, 2026
CVE-2026-40230: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Apr 29, 2026
CVE-2026-42523: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A0%Apr 29, 2026
CVE-2026-42518: Use of Hard-coded Cryptographic KeyN/A8.7 High0%Apr 29, 2026
CVE-2025-10503: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 29, 2026
CVE-2026-37750: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 28, 2026
CVE-2026-7191: Improper Control of Generation of Code7.2 High8.6 High0%Apr 27, 2026
CVE-2026-5362: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Apr 27, 2026
CVE-2026-29971: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 27, 2026
CVE-2026-41467: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Apr 27, 2026
CVE-2026-41472: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium1%Apr 24, 2026
CVE-2026-41248: Interpretation Conflict9.1 CriticalN/A0%Apr 24, 2026
CVE-2026-41421: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Apr 24, 2026
CVE-2026-42042: Permissive List of Allowed Inputs5.4 MediumN/A0%Apr 24, 2026
CVE-2026-42041: Improper Authentication6.5 MediumN/A1%Apr 24, 2026
CVE-2026-41067: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Apr 24, 2026
2101-2125 of 10604
‹›