The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-65807: Access of Resource Using Incompatible Type8.8 HighN/A1%Aug 11, 2026
CVE-2026-65665: Deserialization of Untrusted Data8.8 HighN/A2%Aug 11, 2026
CVE-2026-65664: Heap-based Buffer Overflow7.8 HighN/A0%Aug 11, 2026
CVE-2026-65663: Deserialization of Untrusted Data8.8 HighN/A2%Aug 11, 2026
CVE-2026-65661: Heap-based Buffer Overflow7.8 HighN/A0%Aug 11, 2026
CVE-2026-65658: Deserialization of Untrusted Data8.8 HighN/A2%Aug 11, 2026
CVE-2026-65656: Improper Neutralization of Special Elements used in a Command7.8 HighN/A0%Aug 11, 2026
CVE-2026-65657: Use After Free7.8 HighN/A0%Aug 11, 2026
CVE-2026-64922: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A1%Aug 11, 2026
CVE-2026-63519: Heap-based Buffer Overflow7.8 HighN/A0%Aug 11, 2026
CVE-2026-63521: Out-of-bounds Read5.5 MediumN/A0%Aug 11, 2026
CVE-2026-63518: Heap-based Buffer Overflow7.8 HighN/A0%Aug 11, 2026
CVE-2026-63517: Out-of-bounds Read5.5 MediumN/A1%Aug 11, 2026
CVE-2026-63515: Out-of-bounds Read7.8 HighN/A0%Aug 11, 2026
CVE-2026-63513: Heap-based Buffer Overflow7.8 HighN/A0%Aug 11, 2026
CVE-2026-63520: Improper Input Validation8.1 HighN/A1%Aug 11, 2026
CVE-2026-63516: Deserialization of Untrusted Data6.5 MediumN/A2%Aug 11, 2026
CVE-2026-63512: Incorrect Authorization6.5 MediumN/A1%Aug 11, 2026
CVE-2026-63514: Deserialization of Untrusted Data8.8 HighN/A2%Aug 11, 2026
CVE-2026-62837: Relative Path Traversal6.5 MediumN/A1%Aug 11, 2026
CVE-2026-62827: Improper Authentication8.8 HighN/A1%Aug 11, 2026
CVE-2026-62829: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Aug 11, 2026
CVE-2026-57105: Improper Neutralization of Input During Web Page Generation8.0 HighN/A1%Aug 11, 2026
CVE-2026-70332: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A0%Aug 6, 2026
CVE-2026-62870: Use After Free8.8 HighN/A1%Aug 3, 2026
226-250 of 1558