The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-14282: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Jul 23, 2026
CVE-2026-13119: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Jul 23, 2026
CVE-2026-13009: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Jul 23, 2026
CVE-2026-52688: Improper Certificate Validation7.5 HighN/A0%Jul 23, 2026
CVE-2026-52686: Improper Verification of Cryptographic Signature3.7 LowN/A0%Jul 23, 2026
CVE-2026-52684: Undefined Security Weakness3.7 LowN/A0%Jul 23, 2026
CVE-2026-16723: Improper Input Validation9.0 CriticalN/A1%Jul 23, 2026
CVE-2026-16287: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A1%Jul 23, 2026
CVE-2024-58330: Improper Access Control7.5 HighN/A1%Jul 23, 2026
CVE-2024-58023: Cleartext Storage of Sensitive Information8.4 HighN/A0%Jul 23, 2026
CVE-2026-9729: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 23, 2026
CVE-2026-9713: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Jul 23, 2026
CVE-2026-9635: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jul 23, 2026
CVE-2026-59678: Incorrect AuthorizationN/A7.1 High0%Jul 23, 2026
CVE-2026-59677: Missing AuthorizationN/A6.8 Medium0%Jul 23, 2026
CVE-2026-12421: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Jul 23, 2026
CVE-2026-9577: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jul 23, 2026
CVE-2026-9066: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 23, 2026
CVE-2026-59676: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A5.8 Medium0%Jul 23, 2026
CVE-2026-14291: Improper Authentication7.5 HighN/A0%Jul 23, 2026
CVE-2026-12082: Missing Authorization7.5 HighN/A0%Jul 23, 2026
CVE-2026-7534: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Jul 23, 2026
CVE-2026-7232: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Jul 23, 2026
CVE-2026-64600: Concurrent Execution using Shared Resource with Improper Synchronization7.8 HighN/A0%Jul 23, 2026
CVE-2026-63226: Improper Restriction of Communication Channel to Intended Endpoints5.8 Medium6.9 Medium0%Jul 23, 2026
27851-27875 of 391694