The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-63754: Improper Check for Unusual or Exceptional Conditions6.5 Medium7.1 High0%Jul 20, 2026
CVE-2026-63753: Insufficient Session Expiration4.3 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-63750: Allocation of Resources Without Limits or Throttling7.5 High6.9 Medium0%Jul 20, 2026
CVE-2026-63749: Incorrect Authorization4.3 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-63748: Generation of Error Message Containing Sensitive Information4.3 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-63747: Uncaught Exception7.5 High8.7 High1%Jul 20, 2026
CVE-2026-63746: Exposure of Sensitive Information to an Unauthorized Actor6.5 Medium7.1 High0%Jul 20, 2026
CVE-2026-63745: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-63744: Server-Side Request Forgery (SSRF)4.1 Medium5.1 Medium0%Jul 20, 2026
CVE-2026-63743: Server-Side Request Forgery (SSRF)6.4 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-63742: Incorrect Authorization4.3 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-63741: Missing Authorization6.5 Medium6.9 Medium0%Jul 20, 2026
CVE-2026-63740: Incorrect Authorization6.5 Medium7.1 High0%Jul 20, 2026
CVE-2026-63739: Improper Limitation of a Pathname to a Restricted Directory7.7 High8.3 High0%Jul 20, 2026
CVE-2026-63738: Incorrect Authorization4.3 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-63737: Uncontrolled Recursion6.5 Medium7.1 High0%Jul 20, 2026
CVE-2026-63736: Server-Side Request Forgery (SSRF)4.1 Medium5.1 Medium0%Jul 20, 2026
CVE-2026-63735: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Jul 20, 2026
CVE-2026-63734: Improper Input Validation4.9 Medium6.9 Medium0%Jul 20, 2026
CVE-2026-63733: Incorrect Authorization6.5 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-16254: Out-of-bounds Read4.3 MediumN/A0%Jul 20, 2026
CVE-2026-16247: Incorrect Default Permissions7.3 HighN/A0%Jul 20, 2026
CVE-2026-16246: Incorrect Default Permissions7.3 HighN/A0%Jul 20, 2026
CVE-2026-15813: Out-of-bounds Write6.5 MediumN/A0%Jul 20, 2026
CVE-2026-15588: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Jul 20, 2026
39801-39825 of 417606