The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-63357: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-63356: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-63355: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-63354: Improper Neutralization of Input During Web Page Generation9.6 Critical9.4 Critical0%Oct 13, 2026
CVE-2026-63353: Improper Neutralization of Input During Web Page Generation9.6 Critical9.4 Critical0%Oct 13, 2026
CVE-2026-63352: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-63351: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-63350: Improper Neutralization of Directives in Dynamically Evaluated Code9.6 Critical9.4 Critical0%Oct 13, 2026
CVE-2026-96535: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Oct 13, 2026
CVE-2026-103418: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Oct 13, 2026
CVE-2026-89269: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Oct 13, 2026
CVE-2026-92883: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Oct 13, 2026
CVE-2026-75076: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Oct 12, 2026
CVE-2026-75063: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 12, 2026
CVE-2026-18541: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 12, 2026
CVE-2026-109595: Improper Limitation of a Pathname to a Restricted Directory5.5 Medium6.7 Medium0%Oct 12, 2026
CVE-2025-71432: Improper Neutralization of Input During Web Page Generation8.1 High8.6 High0%Oct 12, 2026
CVE-2025-71430: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 12, 2026
CVE-2026-84319: Protection Mechanism Failure8.3 HighN/A0%Oct 12, 2026
CVE-2026-109565: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-104774: Encoding Error5.8 MediumN/A0%Oct 12, 2026
CVE-2025-27897: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 12, 2026
CVE-2025-27896: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 12, 2026
CVE-2025-27895: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 12, 2026
CVE-2026-85965: Use After Free8.0 HighN/A0%Oct 12, 2026
201-225 of 10609