The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-58157: Exposure of Sensitive Information to an Unauthorized Actor8.7 High6.9 Medium0%Jul 29, 2026
CVE-2026-50622: Missing Authorization8.8 HighN/A0%Jul 29, 2026
CVE-2026-23904: Improper Restriction of Communication Channel to Intended Endpoints7.3 HighN/A1%Jul 29, 2026
CVE-2026-18201: Missing Authorization5.5 MediumN/A0%Jul 29, 2026
CVE-2025-10656: Incorrect Authorization9.8 CriticalN/A0%Jul 29, 2026
CVE-2026-9720: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Jul 29, 2026
CVE-2026-65325: Improper Certificate Validation4.8 Medium6.3 Medium0%Jul 29, 2026
CVE-2026-65324: Uncontrolled Resource Consumption7.5 High8.2 High1%Jul 29, 2026
CVE-2026-64557: Undefined Security Weakness8.8 HighN/A0%Jul 29, 2026
CVE-2026-64556: Undefined Security Weakness7.8 HighN/A0%Jul 29, 2026
CVE-2026-58156: Incorrect Authorization4.9 Medium6.3 Medium0%Jul 29, 2026
CVE-2026-58155: Inconsistent Interpretation of HTTP Requests9.3 Critical9.2 Critical0%Jul 29, 2026
CVE-2026-58154: Out-of-bounds Write8.9 High9.2 Critical0%Jul 29, 2026
CVE-2026-58153: Inconsistent Interpretation of HTTP Requests8.3 High6.3 Medium0%Jul 29, 2026
CVE-2026-58152: Integer Overflow or Wraparound5.9 Medium6.9 Medium0%Jul 29, 2026
CVE-2026-58151: Uncontrolled Resource Consumption7.5 High8.7 High1%Jul 29, 2026
CVE-2026-13425: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Jul 29, 2026
CVE-2026-11973: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Jul 29, 2026
CVE-2026-18207: Improper Authorization6.5 MediumN/A0%Jul 29, 2026
CVE-2026-58150: Inconsistent Interpretation of HTTP Requests10.0 Critical7.8 High0%Jul 29, 2026
CVE-2026-57834: Inconsistent Interpretation of HTTP Requests10.0 Critical7.0 High0%Jul 29, 2026
CVE-2026-41920: Improper Access Control9.3 Critical7.0 High0%Jul 29, 2026
CVE-2026-35226: Out-of-bounds Write6.5 Medium7.1 High0%Jul 29, 2026
CVE-2026-33930: Stack-based Buffer Overflow5.9 Medium8.2 High0%Jul 29, 2026
CVE-2026-33267: Improper Input Validation9.1 Critical7.7 High0%Jul 29, 2026
26151-26175 of 682148