The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-18900: Improper Neutralization of Special Elements used in an OS Command7.2 High7.3 High2%Aug 5, 2026
CVE-2026-18898: Stack-based Buffer Overflow8.8 High7.4 High0%Aug 5, 2026
CVE-2026-18907: Relative Path Traversal7.5 HighN/A0%Aug 5, 2026
CVE-2026-18897: Stack-based Buffer Overflow8.8 High7.4 High1%Aug 5, 2026
CVE-2026-18896: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 5, 2026
CVE-2026-18895: Stack-based Buffer Overflow8.8 High7.4 High1%Aug 5, 2026
CVE-2026-18859: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 5, 2026
CVE-2026-18856: Server-Side Request Forgery (SSRF)4.7 Medium2.0 Low0%Aug 5, 2026
CVE-2026-46334: NULL Pointer DereferenceN/A8.7 High0%Aug 5, 2026
CVE-2026-45809: Stack-based Buffer OverflowN/A8.7 High0%Aug 5, 2026
CVE-2026-45705: Out-of-bounds Read5.3 MediumN/A0%Aug 5, 2026
CVE-2026-18854: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 5, 2026
CVE-2026-18853: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium1.9 Low0%Aug 5, 2026
CVE-2026-18852: Improper Check for Unusual or Exceptional Conditions3.3 Low1.9 Low0%Aug 5, 2026
CVE-2026-18103: Buffer Copy without Checking Size of Input4.9 MediumN/A0%Aug 5, 2026
CVE-2026-45537: Buffer Copy without Checking Size of Input9.1 CriticalN/A0%Aug 4, 2026
CVE-2026-18819: Cross-Site Request Forgery (CSRF)4.3 Medium2.1 Low0%Aug 4, 2026
CVE-2026-18818: Authorization Bypass Through User-Controlled Key6.3 Medium5.3 Medium0%Aug 4, 2026
CVE-2026-70620: Server-Side Request Forgery (SSRF)6.8 Medium6.1 Medium0%Aug 4, 2026
CVE-2026-70594: Session Fixation6.7 MediumN/A0%Aug 4, 2026
CVE-2026-70593: Improper Limitation of a Pathname to a Restricted Directory6.6 MediumN/A0%Aug 4, 2026
CVE-2026-70592: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A0%Aug 4, 2026
CVE-2026-70591: Server-Side Request Forgery (SSRF)4.1 MediumN/A0%Aug 4, 2026
CVE-2026-70590: Exposure of Sensitive Information to an Unauthorized Actor4.8 MediumN/A0%Aug 4, 2026
CVE-2026-70589: Improper Input Validation4.8 MediumN/A0%Aug 4, 2026
25276-25300 of 406335