The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-64650: Incorrect AuthorizationN/A6.3 Medium0%Jul 20, 2026
CVE-2026-58624: Improper Input Validation5.4 MediumN/A1%Jul 20, 2026
CVE-2026-56624: Improper Certificate Validation7.3 HighN/A0%Jul 20, 2026
CVE-2026-56623: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A1%Jul 20, 2026
CVE-2026-56452: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Jul 20, 2026
CVE-2026-55219: Concurrent Execution using Shared Resource with Improper Synchronization5.3 MediumN/A0%Jul 20, 2026
CVE-2026-53596: Uncontrolled Resource Consumption5.3 MediumN/A0%Jul 20, 2026
CVE-2026-53595: Improper Handling of Case Sensitivity9.4 CriticalN/A2%Jul 20, 2026
CVE-2026-53594: Improper Limitation of a Pathname to a Restricted Directory4.9 MediumN/A1%Jul 20, 2026
CVE-2026-47198: Improper Input Validation8.5 HighN/A0%Jul 20, 2026
CVE-2026-47130: Authorization Bypass Through User-Controlled Key7.1 HighN/A0%Jul 20, 2026
CVE-2026-47129: Missing Authorization8.1 HighN/A0%Jul 20, 2026
CVE-2026-44585: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Jul 20, 2026
CVE-2026-44584: Insufficient Verification of Data Authenticity4.3 MediumN/A0%Jul 20, 2026
CVE-2026-44583: Server-Side Request Forgery (SSRF)5.3 MediumN/A0%Jul 20, 2026
CVE-2026-44509: Undefined Security WeaknessN/AN/A0%Jul 20, 2026
CVE-2026-44508: Undefined Security WeaknessN/AN/A0%Jul 20, 2026
CVE-2026-44507: Undefined Security WeaknessN/AN/A0%Jul 20, 2026
CVE-2026-13381: Authorization Bypass Through User-Controlled Key8.1 High8.7 High0%Jul 20, 2026
CVE-2026-13380: Insertion of Sensitive Information Into Sent Data7.5 High9.0 Critical0%Jul 20, 2026
CVE-2024-51313: Stack-based Buffer Overflow9.8 CriticalN/A1%Jul 20, 2026
CVE-2024-51311: Stack-based Buffer Overflow9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-63767: Deserialization of Untrusted Data9.8 Critical9.3 Critical1%Jul 20, 2026
CVE-2026-63766: Improper Neutralization of Special Elements used in an OS Command9.8 Critical9.3 Critical2%Jul 20, 2026
CVE-2026-53593: Unrestricted Upload of File with Dangerous Type8.8 HighN/A1%Jul 20, 2026
39651-39675 of 417606