The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-70441: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 5, 2026
CVE-2026-70440: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 5, 2026
CVE-2026-70439: Missing Authorization6.5 MediumN/A0%Aug 5, 2026
CVE-2026-70438: Missing Authorization4.3 MediumN/A0%Aug 5, 2026
CVE-2026-70437: Observable Timing Discrepancy3.7 LowN/A0%Aug 5, 2026
CVE-2026-70436: Missing Authorization4.3 MediumN/A0%Aug 5, 2026
CVE-2026-70435: Missing Authorization4.2 MediumN/A0%Aug 5, 2026
CVE-2026-70434: Cross-Site Request Forgery (CSRF)4.2 MediumN/A0%Aug 5, 2026
CVE-2026-70433: Missing Authorization4.3 MediumN/A0%Aug 5, 2026
CVE-2026-70432: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Aug 5, 2026
CVE-2026-70431: Improper Control of Generation of Code8.8 HighN/A1%Aug 5, 2026
CVE-2026-70430: Improper Access Control2.7 LowN/A0%Aug 5, 2026
CVE-2026-70429: Improper Handling of Case Sensitivity6.5 MediumN/A0%Aug 5, 2026
CVE-2026-70428: Improper Limitation of a Pathname to a Restricted Directory4.3 MediumN/A0%Aug 5, 2026
CVE-2026-70427: Improper Link Resolution Before File Access4.3 MediumN/A0%Aug 5, 2026
CVE-2026-70426: Deserialization of Untrusted Data9.0 CriticalN/A0%Aug 5, 2026
CVE-2026-44605: Integer Overflow or Wraparound5.5 MediumN/A0%Aug 5, 2026
CVE-2026-17625: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 5, 2026
CVE-2026-10716: Improper Neutralization of Special Elements used in an SQL CommandN/A7.5 High0%Aug 5, 2026
CVE-2026-10128: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Aug 5, 2026
CVE-2026-9077: Reliance on Untrusted Inputs in a Security Decision8.5 HighN/A0%Aug 5, 2026
CVE-2026-8446: Missing Authentication for Critical Function7.5 HighN/A0%Aug 5, 2026
CVE-2026-7646: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Aug 5, 2026
CVE-2026-70607: Improper Input Validation5.3 MediumN/A1%Aug 5, 2026
CVE-2026-20313: Improper Validation of Specified Quantity in Input7.7 HighN/A0%Aug 5, 2026
25001-25025 of 398978