The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-18810: Missing Authentication for Critical Function7.3 High6.9 Medium1%Aug 4, 2026
CVE-2026-18657: Uncontrolled Search Path Element7.8 High8.5 High0%Aug 4, 2026
CVE-2026-18656: Uncontrolled Search Path Element7.8 High8.5 High0%Aug 4, 2026
CVE-2026-16793: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High1%Aug 4, 2026
CVE-2026-16792: Improper Certificate Validation6.1 Medium7.0 High0%Aug 4, 2026
CVE-2026-16791: Insecure Temporary File3.9 Low1.0 Low0%Aug 4, 2026
CVE-2026-70554: Deserialization of Untrusted Data9.8 Critical9.3 Critical1%Aug 4, 2026
CVE-2026-70552: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Aug 4, 2026
CVE-2026-70474: Incorrect Authorization8.1 High7.6 High0%Aug 4, 2026
CVE-2026-70473: Exposure of Sensitive Information to an Unauthorized Actor8.5 High8.3 High0%Aug 4, 2026
CVE-2026-70472: Improper Authorization8.8 High7.1 High1%Aug 4, 2026
CVE-2026-70471: Incorrect Authorization6.5 Medium7.1 High0%Aug 4, 2026
CVE-2026-69704: Improper Neutralization of Special Elements used in an SQL Command6.5 Medium7.0 High0%Aug 4, 2026
CVE-2026-69703: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Aug 4, 2026
CVE-2026-69702: Memory Allocation with Excessive Size Value6.5 Medium7.1 High1%Aug 4, 2026
CVE-2026-68743: Out-of-bounds Read7.1 HighN/A0%Aug 4, 2026
CVE-2026-66300: Improper Neutralization of Input During Web Page Generation5.0 Medium2.3 Low0%Aug 4, 2026
CVE-2026-49435: Stack-based Buffer Overflow9.8 Critical9.3 Critical1%Aug 4, 2026
CVE-2026-47781: Inclusion of Functionality from Untrusted Control SphereN/A8.4 High0%Aug 4, 2026
CVE-2026-47764: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.4 High0%Aug 4, 2026
CVE-2026-13229: Missing AuthorizationN/A7.1 High0%Aug 4, 2026
CVE-2026-0163: Use After Free9.8 CriticalN/A0%Aug 4, 2026
CVE-2017-20242: Stack-based Buffer Overflow9.8 Critical9.3 Critical1%Aug 4, 2026
CVE-2017-20241: Heap-based Buffer Overflow9.8 Critical9.3 Critical1%Aug 4, 2026
CVE-2026-70470: Incomplete List of Disallowed Inputs9.8 Critical9.5 Critical1%Aug 4, 2026
25351-25375 of 400317