The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-13061: Incorrect Authorization4.3 Medium5.3 Medium0%Jul 22, 2026
CVE-2026-13059: Reliance on Untrusted Inputs in a Security Decision8.1 High8.6 High0%Jul 22, 2026
CVE-2026-13058: Reachable Assertion6.5 Medium7.1 High0%Jul 22, 2026
CVE-2026-13057: Improper Input Validation6.5 Medium6.0 Medium0%Jul 22, 2026
CVE-2026-13056: Improperly Controlled Sequential Memory Allocation6.5 Medium7.1 High0%Jul 22, 2026
CVE-2026-13055: Reachable Assertion6.5 Medium7.1 High0%Jul 22, 2026
CVE-2026-13060: Incorrect Authorization6.5 Medium7.1 High0%Jul 22, 2026
CVE-2026-13062: Unintended Proxy or Intermediary6.5 Medium7.1 High0%Jul 22, 2026
CVE-2026-3482: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Jul 22, 2026
CVE-2026-22049: Authentication Bypass Using an Alternate Path or Channel8.8 High8.7 High0%Jul 22, 2026
CVE-2026-16624: Authorization Bypass Through User-Controlled Key9.6 CriticalN/A0%Jul 22, 2026
CVE-2026-65650: Allocation of Resources Without Limits or Throttling4.3 MediumN/A0%Jul 22, 2026
CVE-2026-64835: Out-of-bounds Write8.8 High8.7 High0%Jul 22, 2026
CVE-2026-64834: Loop with Unreachable Exit Condition7.5 High8.7 High1%Jul 22, 2026
CVE-2026-64833: Out-of-bounds Read7.1 High7.1 High0%Jul 22, 2026
CVE-2026-64832: Double Free8.8 High8.7 High0%Jul 22, 2026
CVE-2026-16157: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Jul 22, 2026
CVE-2026-7328: Missing AuthorizationN/A6.8 Medium0%Jul 22, 2026
CVE-2026-65013: Authorization Bypass Through User-Controlled Key8.8 High8.7 High1%Jul 22, 2026
CVE-2026-65012: Missing Authentication for Critical Function5.3 Medium6.3 Medium0%Jul 22, 2026
CVE-2026-65011: Missing Authorization4.3 Medium5.3 Medium0%Jul 22, 2026
CVE-2026-64831: Stack-based Buffer Overflow8.8 High8.7 High1%Jul 22, 2026
CVE-2026-64830: Heap-based Buffer Overflow8.8 High8.7 High1%Jul 22, 2026
CVE-2026-16615: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)6.8 MediumN/A0%Jul 22, 2026
CVE-2026-64828: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Jul 22, 2026
27951-27975 of 391694