The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-24751: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Jun 1, 2026
CVE-2026-9309: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 1, 2026
CVE-2026-9308: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 1, 2026
CVE-2026-48559: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Jun 1, 2026
CVE-2026-40545: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium1%Jun 1, 2026
CVE-2026-40544: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Jun 1, 2026
CVE-2026-48209: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jun 1, 2026
CVE-2026-48208: Uncontrolled Resource Consumption6.5 MediumN/A0%Jun 1, 2026
CVE-2026-10204: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jun 1, 2026
CVE-2026-10203: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jun 1, 2026
CVE-2026-10202: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jun 1, 2026
CVE-2026-10193: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%May 31, 2026
CVE-2026-10153: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%May 30, 2026
CVE-2026-10152: Improper Access Control6.3 Medium2.1 Low0%May 30, 2026
CVE-2026-44287: Improper Control of Generation of Code6.3 MediumN/A0%May 29, 2026
CVE-2026-45628: Improper Input Validation9.6 CriticalN/A0%May 29, 2026
CVE-2026-45627: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%May 29, 2026
CVE-2026-33386: Improper Neutralization of Input During Web Page GenerationN/A2.3 Low0%May 29, 2026
CVE-2018-25384: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%May 29, 2026
CVE-2026-41159: Improper Control of Generation of Code5.3 Medium5.3 Medium1%May 29, 2026
CVE-2026-41150: Loop with Unreachable Exit Condition5.3 Medium5.3 Medium1%May 29, 2026
CVE-2026-47694: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 29, 2026
CVE-2026-45580: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%May 29, 2026
CVE-2026-44698: Improper Control of Generation of Code8.3 HighN/A0%May 29, 2026
CVE-2026-45551: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%May 29, 2026
2451-2475 of 16403
‹›