The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-54386: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Jun 17, 2026
CVE-2026-50196: Improper Input Validation7.5 HighN/A1%Jun 17, 2026
CVE-2026-48991: Improper Authentication5.5 MediumN/A0%Jun 17, 2026
CVE-2026-48821: Improper Neutralization of Input During Web Page Generation5.8 MediumN/A0%Jun 17, 2026
CVE-2026-48823: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jun 17, 2026
CVE-2026-48822: Improper Neutralization of Input During Web Page Generation5.8 MediumN/A0%Jun 17, 2026
CVE-2026-48591: Improper Neutralization of Script in Attributes in a Web PageN/A4.8 Medium0%Jun 17, 2026
CVE-2025-26240: Undefined Security Weakness8.4 HighN/A0%Jun 17, 2026
CVE-2026-9570: Undefined Security Weakness7.1 HighN/A0%Jun 17, 2026
CVE-2026-48788: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Jun 17, 2026
CVE-2026-44587: Permissive Regular Expression6.1 MediumN/A0%Jun 17, 2026
CVE-2026-28587: Undefined Security Weakness5.5 Medium10.0 Critical0%Jun 17, 2026
CVE-2026-28575: Undefined Security Weakness5.5 Medium10.0 Critical0%Jun 17, 2026
CVE-2026-27870: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium1%Jun 17, 2026
CVE-2026-11975: Improper Neutralization of Input During Web Page GenerationN/A6.2 Medium0%Jun 17, 2026
CVE-2026-0082: Undefined Security Weakness7.8 High10.0 Critical0%Jun 17, 2026
CVE-2026-0068: Undefined Security Weakness7.8 High10.0 Critical0%Jun 17, 2026
CVE-2026-0063: Undefined Security Weakness7.8 High10.0 Critical0%Jun 17, 2026
CVE-2025-48617: Undefined Security Weakness7.8 HighN/A0%Jun 17, 2026
CVE-2026-46771: Undefined Security Weakness4.1 MediumN/A0%Jun 17, 2026
CVE-2026-12425: Improper Neutralization of Input During Web Page Generation6.1 Medium5.7 Medium0%Jun 16, 2026
CVE-2026-53841: Improper Neutralization of Script in Attributes in a Web Page6.1 Medium2.1 Low0%Jun 16, 2026
CVE-2026-12321: Always-Incorrect Control Flow Implementation5.4 MediumN/A0%Jun 16, 2026
CVE-2026-48157: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jun 15, 2026
CVE-2026-48017: Improper Control of Generation of Code8.8 HighN/A1%Jun 15, 2026
2201-2225 of 16393
‹›