The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-49401: Improper Resolution of Path Equivalence7.3 HighN/A0%Jun 23, 2026
CVE-2026-54302: Improper Neutralization of Input During Web Page Generation5.4 Medium7.0 High0%Jun 23, 2026
CVE-2026-54301: Improper Neutralization of Input During Web Page Generation5.4 Medium7.0 High0%Jun 23, 2026
CVE-2026-44960: Improper Neutralization of Input During Web Page Generation0.0 NoneN/A0%Jun 23, 2026
CVE-2026-44956: Improper Neutralization of Input During Web Page Generation0.0 NoneN/A0%Jun 23, 2026
CVE-2026-54309: Missing Authentication for Critical Function10.0 Critical8.8 High1%Jun 23, 2026
CVE-2026-11772: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium1%Jun 23, 2026
CVE-2026-56784: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Jun 23, 2026
CVE-2026-12866: Improper Control of Generation of Code9.8 Critical9.2 Critical1%Jun 23, 2026
CVE-2026-56698: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Jun 22, 2026
CVE-2026-55409: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Jun 22, 2026
CVE-2026-48167: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jun 22, 2026
CVE-2026-44311: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 22, 2026
CVE-2026-54288: Insufficient Verification of Data Authenticity6.5 MediumN/A0%Jun 22, 2026
CVE-2026-54290: Permissive Cross-domain Policy with Untrusted Domains7.1 HighN/A0%Jun 22, 2026
CVE-2026-54289: Use of Less Trusted Source4.8 MediumN/A0%Jun 22, 2026
CVE-2026-54287: Improper Encoding or Escaping of Output5.3 MediumN/A0%Jun 22, 2026
CVE-2026-54286: Improper Limitation of a Pathname to a Restricted Directory5.9 MediumN/A0%Jun 22, 2026
CVE-2026-54285: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Jun 22, 2026
CVE-2026-54271: Improper Control of Generation of Code8.2 HighN/A0%Jun 22, 2026
CVE-2026-54270: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Jun 22, 2026
CVE-2026-54269: Uncontrolled Recursion5.3 MediumN/A0%Jun 22, 2026
CVE-2026-53571: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.2 High1%Jun 22, 2026
CVE-2026-50556: Improper Neutralization of Input During Web Page Generation6.1 Medium8.6 High0%Jun 22, 2026
CVE-2026-50555: Improper Neutralization of Input During Web Page Generation6.1 Medium8.6 High0%Jun 22, 2026
2126-2150 of 16392
‹›