The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-44621: Improper Check for Unusual or Exceptional Conditions5.9 MediumN/A0%Jul 22, 2026
CVE-2026-42955: Operation on a Resource after Expiration or Release3.7 LowN/A0%Jul 22, 2026
CVE-2026-41637: Missing Release of Resource after Effective Lifetime3.7 LowN/A0%Jul 22, 2026
CVE-2026-40691: Heap-based Buffer Overflow7.5 HighN/A0%Jul 22, 2026
CVE-2026-16560: Insufficient Granularity of Access Control5.3 MediumN/A0%Jul 22, 2026
CVE-2026-16232: Improper Authentication9.8 Critical9.3 Critical73%Jul 22, 2026
CVE-2026-14932: Use of Hard-coded Cryptographic Key6.5 MediumN/A0%Jul 22, 2026
CVE-2026-14865: Improper Restriction of Recursive Entity References in DTDs5.3 MediumN/A0%Jul 22, 2026
CVE-2026-14586: Reachable Assertion5.9 MediumN/A0%Jul 22, 2026
CVE-2026-13192: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Jul 22, 2026
CVE-2026-13190: Deserialization of Untrusted Data8.1 HighN/A1%Jul 22, 2026
CVE-2026-13189: Absolute Path Traversal7.5 HighN/A1%Jul 22, 2026
CVE-2026-13188: Insufficient Verification of Data Authenticity5.9 MediumN/A0%Jul 22, 2026
CVE-2026-13187: Use of Externally-Controlled Input to Select Classes or Code8.1 HighN/A0%Jul 22, 2026
CVE-2026-13186: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A1%Jul 22, 2026
CVE-2026-13185: Deserialization of Untrusted Data8.1 HighN/A0%Jul 22, 2026
CVE-2026-13184: Use of Hard-coded Cryptographic Key7.5 HighN/A0%Jul 22, 2026
CVE-2026-13183: Observable Timing Discrepancy7.5 HighN/A0%Jul 22, 2026
CVE-2026-13182: Generation of Error Message Containing Sensitive Information7.5 HighN/A0%Jul 22, 2026
CVE-2026-13181: Use of Externally-Controlled Input to Select Classes or Code8.1 HighN/A1%Jul 22, 2026
CVE-2026-8152: URL Redirection to Untrusted SiteN/A9.3 Critical0%Jul 22, 2026
CVE-2026-44191: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A1%Jul 22, 2026
CVE-2026-16270: Inefficient Regular Expression ComplexityN/A6.9 Medium0%Jul 22, 2026
CVE-2026-55991: Signed to Unsigned Conversion Error5.9 MediumN/A0%Jul 22, 2026
CVE-2026-32665: Improper Validation of Specified Quantity in Input7.5 HighN/A0%Jul 22, 2026
28026-28050 of 566702