The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-15157: Improper Neutralization of CRLF Sequences5.4 MediumN/A0%Jul 29, 2026
CVE-2026-14643: Interpretation Conflict7.5 HighN/A0%Jul 29, 2026
CVE-2025-69949: Improper Neutralization of Special Elements used in an SQL Command7.3 HighN/A0%Jul 29, 2026
CVE-2025-69945: Improper Neutralization of Special Elements used in an SQL Command7.3 HighN/A0%Jul 29, 2026
CVE-2025-69944: Improper Neutralization of Special Elements used in an SQL Command7.3 HighN/A0%Jul 29, 2026
CVE-2025-69943: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jul 29, 2026
CVE-2025-69942: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jul 29, 2026
CVE-2025-67408: Improper Neutralization of Special Elements used in an SQL Command7.3 HighN/A0%Jul 29, 2026
CVE-2025-67407: Improper Neutralization of Special Elements used in an SQL Command7.3 HighN/A0%Jul 29, 2026
CVE-2025-67406: Improper Neutralization of Special Elements used in an SQL Command7.3 HighN/A0%Jul 29, 2026
CVE-2025-67405: Improper Neutralization of Special Elements used in an SQL Command7.3 HighN/A0%Jul 29, 2026
CVE-2025-67404: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jul 29, 2026
CVE-2025-67403: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jul 29, 2026
CVE-2026-67595: Embedded Malicious Code8.1 High9.2 Critical1%Jul 29, 2026
CVE-2026-67439: Incorrect Authorization4.3 MediumN/A0%Jul 29, 2026
CVE-2026-67438: Improper Neutralization of Special Elements used in an OS Command6.6 MediumN/A2%Jul 29, 2026
CVE-2026-67437: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 29, 2026
CVE-2026-65975: Incorrect Authorization6.5 MediumN/A0%Jul 29, 2026
CVE-2026-54249: Server-Side Request Forgery (SSRF)6.8 MediumN/A0%Jul 29, 2026
CVE-2026-50782: Improper Restriction of XML External Entity Reference7.5 HighN/A1%Jul 29, 2026
CVE-2026-46678: Server-Side Request Forgery (SSRF)5.9 MediumN/A0%Jul 29, 2026
CVE-2026-16728: Inconsistent Interpretation of HTTP Requests6.5 MediumN/A0%Jul 29, 2026
CVE-2026-13309: Stack-based Buffer Overflow6.8 MediumN/A0%Jul 29, 2026
CVE-2026-13308: Integer Underflow (Wrap or Wraparound)8.1 HighN/A1%Jul 29, 2026
CVE-2026-13307: Heap-based Buffer Overflow6.8 MediumN/A0%Jul 29, 2026
26026-26050 of 400232