The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-7444: Cross-Site Request Forgery (CSRF)8.1 HighN/A0%Aug 5, 2026
CVE-2026-7441: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 5, 2026
CVE-2026-7105: Missing Authorization4.3 MediumN/A0%Aug 5, 2026
CVE-2026-71215: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Aug 5, 2026
CVE-2026-71214: Missing Authentication for Critical Function9.8 CriticalN/A0%Aug 5, 2026
CVE-2026-71213: Improper Restriction of Excessive Authentication Attempts9.1 CriticalN/A0%Aug 5, 2026
CVE-2026-71212: Improper Neutralization of Argument Delimiters in a Command4.4 MediumN/A0%Aug 5, 2026
CVE-2026-71211: Server-Side Request Forgery (SSRF)7.1 HighN/A0%Aug 5, 2026
CVE-2026-71210: Time-of-check Time-of-use (TOCTOU) Race Condition5.3 MediumN/A0%Aug 5, 2026
CVE-2026-71209: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Aug 5, 2026
CVE-2026-71208: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Aug 5, 2026
CVE-2026-71207: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Aug 5, 2026
CVE-2026-71206: Insufficient Session Expiration8.3 HighN/A0%Aug 5, 2026
CVE-2026-71205: Improper Restriction of Excessive Authentication Attempts6.5 MediumN/A0%Aug 5, 2026
CVE-2026-71204: Improper Access Control6.2 MediumN/A0%Aug 5, 2026
CVE-2026-71203: Missing Authentication for Critical Function5.3 MediumN/A0%Aug 5, 2026
CVE-2026-71202: Integer Underflow (Wrap or Wraparound)7.5 HighN/A0%Aug 5, 2026
CVE-2026-70378: Improper Validation of Specified Quantity in Input7.5 HighN/A0%Aug 5, 2026
CVE-2026-70377: Memory Allocation with Excessive Size Value7.5 HighN/A0%Aug 5, 2026
CVE-2026-70376: Cross-Site Request Forgery (CSRF)9.6 CriticalN/A0%Aug 5, 2026
CVE-2026-6972: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 5, 2026
CVE-2026-6639: Missing Authorization7.5 HighN/A0%Aug 5, 2026
CVE-2026-6627: Missing Authorization8.2 HighN/A1%Aug 5, 2026
CVE-2026-6147: Unrestricted Upload of File with Dangerous Type8.8 HighN/A1%Aug 5, 2026
CVE-2026-6079: Missing Authorization7.3 HighN/A0%Aug 5, 2026
25151-25175 of 571263