The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-71884: Reusing a Nonce, Key Pair in EncryptionN/A8.2 High0%Oct 9, 2026
CVE-2026-4264: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Oct 9, 2026
CVE-2026-106155: Improper Neutralization of Input During Web Page Generation8.9 HighN/A0%Oct 9, 2026
CVE-2026-107889: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Oct 9, 2026
CVE-2026-94448: Undefined Security Weakness6.1 MediumN/A0%Oct 8, 2026
CVE-2026-107801: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 8, 2026
CVE-2026-107798: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 8, 2026
CVE-2026-107797: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 8, 2026
CVE-2026-107796: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 8, 2026
CVE-2026-107726: Improper Input ValidationN/A9.3 Critical0%Oct 8, 2026
CVE-2026-78407: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 8, 2026
CVE-2026-17189: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 8, 2026
CVE-2026-11936: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 8, 2026
CVE-2026-107396: Incomplete Denylist to Cross-Site Scripting5.4 MediumN/A0%Oct 8, 2026
CVE-2026-107390: Memory Allocation with Excessive Size Value7.5 HighN/A0%Oct 8, 2026
CVE-2026-104075: Authentication Bypass Using an Alternate Path or Channel9.8 Critical9.3 Critical1%Oct 8, 2026
CVE-2026-107700: Improper Control of Generation of Code9.8 Critical9.3 Critical1%Oct 8, 2026
CVE-2026-107380: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 8, 2026
CVE-2026-107375: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Oct 8, 2026
CVE-2026-107300: Uncontrolled Recursion7.5 HighN/A0%Oct 8, 2026
CVE-2026-107298: Uncontrolled Recursion5.3 MediumN/A0%Oct 8, 2026
CVE-2026-104078: Improper Neutralization of Input During Web Page Generation7.8 High8.4 High0%Oct 8, 2026
CVE-2026-104077: Improper Neutralization of Input During Web Page Generation7.8 High8.5 High0%Oct 8, 2026
CVE-2026-13258: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 8, 2026
CVE-2026-105831: Improper Neutralization of Input During Web Page Generation4.3 Medium5.3 Medium0%Oct 8, 2026
201-225 of 16382
‹›