The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-52680: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A1%Jul 30, 2026
CVE-2026-4978: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jul 30, 2026
CVE-2026-48910: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.5 MediumN/A1%Jul 30, 2026
CVE-2026-44617: Improper Neutralization of Special Elements used in an LDAP Query6.5 MediumN/A1%Jul 30, 2026
CVE-2026-44616: Improper Neutralization of Special Elements used in an LDAP Query6.5 MediumN/A1%Jul 30, 2026
CVE-2026-44613: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%Jul 30, 2026
CVE-2026-28814: Missing Authentication for Critical Function7.5 HighN/A1%Jul 30, 2026
CVE-2026-28813: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Jul 30, 2026
CVE-2026-28812: Authentication Bypass by Spoofing9.8 CriticalN/A1%Jul 30, 2026
CVE-2026-28811: Debug Messages Revealing Unnecessary Information7.5 HighN/A1%Jul 30, 2026
CVE-2026-28323: Improper Authentication9.8 CriticalN/A1%Jul 30, 2026
CVE-2026-23985: Inefficient Regular Expression Complexity6.5 Medium5.3 Medium1%Jul 30, 2026
CVE-2026-23981: Improper Authorization4.3 Medium5.3 Medium1%Jul 30, 2026
CVE-2026-15658: Authorization Bypass Through User-Controlled Key8.1 HighN/A0%Jul 30, 2026
CVE-2026-15657: Insufficiently Protected Credentials6.5 MediumN/A0%Jul 30, 2026
CVE-2026-10842: Authentication Bypass by Alternate Name7.5 HighN/A1%Jul 30, 2026
CVE-2026-57862: Server-Side Request Forgery (SSRF)8.5 High8.4 High0%Jul 30, 2026
CVE-2026-6540: Improper Limitation of a Pathname to a Restricted Directory7.5 High7.9 High1%Jul 30, 2026
CVE-2026-67349: Missing Authentication for Critical Function7.5 High8.7 High0%Jul 30, 2026
CVE-2026-67348: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Jul 30, 2026
CVE-2026-67347: Incorrect Authorization6.8 Medium6.1 Medium1%Jul 30, 2026
CVE-2026-67346: Server-Side Request Forgery (SSRF)8.6 High7.7 High1%Jul 30, 2026
CVE-2026-67345: Permissive List of Allowed Inputs8.1 High8.5 High1%Jul 30, 2026
CVE-2026-65635: Improper Isolation or CompartmentalizationN/A8.3 High1%Jul 30, 2026
CVE-2026-54885: Server-Side Request Forgery (SSRF)N/A6.9 Medium1%Jul 30, 2026
25526-25550 of 433953