The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-51386: Undefined Security WeaknessN/AN/AN/AJul 20, 2026
CVE-2026-46516: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Jul 20, 2026
CVE-2026-46410: Exposure of Sensitive Information to an Unauthorized ActorN/A8.7 High0%Jul 20, 2026
CVE-2026-45270: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Jul 20, 2026
CVE-2026-45139: External Control of File Name or Path6.5 MediumN/A0%Jul 20, 2026
CVE-2026-16277: Stack-based Buffer Overflow6.5 MediumN/A1%Jul 20, 2026
CVE-2026-16252: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Jul 20, 2026
CVE-2026-12701: Improper Limitation of a Pathname to a Restricted Directory9.0 CriticalN/A1%Jul 20, 2026
CVE-2026-57311: Unrestricted Upload of File with Dangerous TypeN/A5.3 Medium1%Jul 20, 2026
CVE-2026-57310: Use of Password Hash With Insufficient Computational EffortN/A6.3 Medium0%Jul 20, 2026
CVE-2026-57309: Improper Neutralization of Special Elements used in an SQL CommandN/A9.3 Critical1%Jul 20, 2026
CVE-2026-16248: Stack-based Buffer Overflow8.8 High7.4 High1%Jul 20, 2026
CVE-2026-16244: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Jul 20, 2026
CVE-2026-12080: UNIX Symbolic Link (Symlink) Following7.3 HighN/A0%Jul 20, 2026
CVE-2026-64623: Improper Verification of Cryptographic Signature8.6 High8.8 High0%Jul 20, 2026
CVE-2026-64622: Missing Authorization7.5 High9.3 Critical0%Jul 20, 2026
CVE-2026-64621: Double Free7.3 High9.3 Critical0%Jul 20, 2026
CVE-2026-64620: Heap-based Buffer Overflow9.1 Critical9.3 Critical1%Jul 20, 2026
CVE-2026-63763: Authorization Bypass Through User-Controlled Key8.8 High7.5 High0%Jul 20, 2026
CVE-2026-63761: Use of a Broken or Risky Cryptographic Algorithm4.3 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-63760: Uncontrolled Recursion7.5 High8.7 High1%Jul 20, 2026
CVE-2026-63759: Uncontrolled Recursion6.5 Medium7.1 High0%Jul 20, 2026
CVE-2026-63758: Missing Authorization5.4 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-63757: Missing Authentication for Critical Function8.8 High8.7 High1%Jul 20, 2026
CVE-2026-63756: Concurrent Execution using Shared Resource with Improper Synchronization8.1 High9.2 Critical0%Jul 20, 2026
39776-39800 of 417606