The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2024-58353: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)8.9 High9.3 Critical0%Jul 23, 2026
CVE-2026-6924: Same Seed in Pseudo-Random Number Generator (PRNG)N/A8.7 High0%Jul 23, 2026
CVE-2026-52439: Improper Neutralization of Special Elements used in an Expression Language Statement9.8 CriticalN/A1%Jul 23, 2026
CVE-2026-50103: Improper Handling of Syntactically Invalid Structure6.5 Medium7.1 High0%Jul 23, 2026
CVE-2026-50039: Stack-based Buffer Overflow7.5 High8.7 High0%Jul 23, 2026
CVE-2026-50032: NULL Pointer Dereference7.5 High8.7 High0%Jul 23, 2026
CVE-2026-49035: Heap-based Buffer Overflow8.1 High9.2 Critical0%Jul 23, 2026
CVE-2026-47724: Missing Authorization9.9 CriticalN/A0%Jul 23, 2026
CVE-2026-47723: Improper Restriction of Rendered UI Layers or FramesN/A7.1 High0%Jul 23, 2026
CVE-2026-39155: Insufficient Verification of Data Authenticity6.5 MediumN/A0%Jul 23, 2026
CVE-2026-38764: Improper Privilege Management7.8 HighN/A0%Jul 23, 2026
CVE-2026-34496: Improper Privilege ManagementN/A7.1 High0%Jul 23, 2026
CVE-2026-21655: Deserialization of Untrusted DataN/A8.7 High0%Jul 23, 2026
CVE-2026-21653: Server-Side Request Forgery (SSRF)N/A7.2 High0%Jul 23, 2026
CVE-2026-16796: Improper Neutralization of Argument Delimiters in a Command7.3 High8.4 High1%Jul 23, 2026
CVE-2026-16002: Out-of-bounds Read8.2 High8.8 High0%Jul 23, 2026
CVE-2026-15981: Improper Authentication9.8 CriticalN/A2%Jul 23, 2026
CVE-2026-15968: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 23, 2026
CVE-2026-15967: Insufficient Session Expiration9.8 CriticalN/A0%Jul 23, 2026
CVE-2026-15966: Permissive Cross-domain Policy with Untrusted Domains9.8 CriticalN/A0%Jul 23, 2026
CVE-2026-15630: Improper Privilege Management9.9 CriticalN/A0%Jul 23, 2026
CVE-2026-10697: Improper Authentication9.8 CriticalN/A1%Jul 23, 2026
CVE-2026-65706: Out-of-bounds Write7.8 High8.5 High0%Jul 23, 2026
CVE-2026-65705: Out-of-bounds Write7.8 High7.3 High0%Jul 23, 2026
CVE-2026-65704: Out-of-bounds Write7.8 High7.3 High0%Jul 23, 2026
28476-28500 of 397000