The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-66737: Undefined Security WeaknessN/AN/AN/AJul 29, 2026
CVE-2026-62995: Insufficient Verification of Data AuthenticityN/A2.3 Low0%Jul 29, 2026
CVE-2026-59898: Inconsistent Interpretation of HTTP Requests7.5 High6.3 Medium0%Jul 29, 2026
CVE-2026-2482: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Jul 29, 2026
CVE-2026-16328: Server-Side Request Forgery (SSRF)8.6 HighN/A0%Jul 29, 2026
CVE-2026-16326: Exposure of Data Element to Wrong Session10.0 CriticalN/A0%Jul 29, 2026
CVE-2026-14529: Missing Authentication for Critical Function9.8 CriticalN/A0%Jul 29, 2026
CVE-2026-13346: Absolute Path Traversal6.5 Medium5.6 Medium0%Jul 29, 2026
CVE-2026-12935: Stack-based Buffer OverflowN/A8.7 High1%Jul 29, 2026
CVE-2026-10684: Out-of-bounds Read3.0 LowN/A0%Jul 29, 2026
CVE-2026-8497: Improper Certificate Validation7.4 HighN/A0%Jul 29, 2026
CVE-2026-59920: Improper Neutralization of CRLF Sequences6.5 MediumN/A0%Jul 29, 2026
CVE-2026-59919: Improper Neutralization of CRLF Sequences5.5 MediumN/A0%Jul 29, 2026
CVE-2026-59901: Loop with Unreachable Exit Condition7.5 High8.7 High0%Jul 29, 2026
CVE-2026-59900: Inconsistent Interpretation of HTTP Requests5.3 Medium6.9 Medium0%Jul 29, 2026
CVE-2026-59899: Allocation of Resources Without Limits or Throttling7.5 High6.9 Medium0%Jul 29, 2026
CVE-2026-54705: Improper Encoding or Escaping of Output6.3 MediumN/A0%Jul 29, 2026
CVE-2026-41939: Use of Default Credentials9.8 Critical9.3 Critical1%Jul 29, 2026
CVE-2026-40272: Improper Validation of Specified Quantity in Input7.0 HighN/A0%Jul 29, 2026
CVE-2026-18236: Incorrect AuthorizationN/A9.3 Critical0%Jul 29, 2026
CVE-2026-14266: Heap-based Buffer Overflow7.8 HighN/A1%Jul 29, 2026
CVE-2026-13723: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Jul 29, 2026
CVE-2026-8339: Improper Neutralization of Special Elements used in an SQL CommandN/A8.7 High0%Jul 29, 2026
CVE-2026-8338: Authentication Bypass Using an Alternate Path or ChannelN/A9.2 Critical0%Jul 29, 2026
CVE-2026-67194: Uncontrolled Recursion6.5 Medium7.1 High0%Jul 29, 2026
26051-26075 of 544242