The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-16971: Allocation of Resources Without Limits or Throttling5.9 MediumN/A0%Jul 30, 2026
CVE-2026-16970: Insufficient Session Expiration4.2 MediumN/A0%Jul 30, 2026
CVE-2026-16969: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Jul 30, 2026
CVE-2022-4994: Undefined Security WeaknessN/AN/A0%Jul 30, 2026
CVE-2026-18353: Server-Side Request Forgery (SSRF)N/A8.8 High0%Jul 30, 2026
CVE-2026-7849: Improper Neutralization of Special Elements used in a Command9.8 Critical9.3 Critical1%Jul 30, 2026
CVE-2026-44108: Incorrect Behavior Order9.8 Critical9.3 Critical1%Jul 30, 2026
CVE-2026-44107: Exposed Dangerous Method or Function7.5 High8.7 High1%Jul 30, 2026
CVE-2026-44106: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High0%Jul 30, 2026
CVE-2026-44105: Insertion of Sensitive Information into Log File6.6 Medium5.8 Medium0%Jul 30, 2026
CVE-2026-44104: Improper Verification of Cryptographic Signature9.8 Critical9.3 Critical0%Jul 30, 2026
CVE-2026-44103: Unrestricted Upload of File with Dangerous Type5.3 Medium6.9 Medium0%Jul 30, 2026
CVE-2026-44102: Concurrent Execution using Shared Resource with Improper Synchronization5.3 Medium6.9 Medium0%Jul 30, 2026
CVE-2026-44101: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Jul 30, 2026
CVE-2026-44100: Missing Authentication for Critical Function9.4 Critical8.8 High0%Jul 30, 2026
CVE-2026-44099: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High0%Jul 30, 2026
CVE-2026-44098: Improper Neutralization of Special Elements used in an OS Command8.6 High8.8 High2%Jul 30, 2026
CVE-2026-44097: Unrestricted Upload of File with Dangerous Type7.1 High5.3 Medium0%Jul 30, 2026
CVE-2026-44096: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High0%Jul 30, 2026
CVE-2026-44095: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High0%Jul 30, 2026
CVE-2026-44094: Not Failing Securely8.6 High8.3 High0%Jul 30, 2026
CVE-2026-44093: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High0%Jul 30, 2026
CVE-2026-44092: Improper Neutralization of CRLF Sequences9.1 Critical8.8 High1%Jul 30, 2026
CVE-2026-44091: Trust Boundary Violation9.1 Critical8.8 High1%Jul 30, 2026
CVE-2026-44090: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Jul 30, 2026
25601-25625 of 437480