The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-44981: Improper Handling of Highly Compressed Data (Data Amplification)N/A8.2 High1%Jul 16, 2026
CVE-2026-15449: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A5.8 Medium0%Jul 16, 2026
CVE-2026-15422: Heap-based Buffer OverflowN/A9.1 Critical1%Jul 16, 2026
CVE-2026-15352: NULL Pointer Dereference7.5 High8.2 High1%Jul 16, 2026
CVE-2026-54526: Improper Access Control9.9 Critical8.9 High1%Jul 16, 2026
CVE-2026-53536: Insufficient Verification of Data AuthenticityN/A5.3 Medium0%Jul 16, 2026
CVE-2026-53535: Improper Limitation of a Pathname to a Restricted DirectoryN/A5.9 Medium1%Jul 16, 2026
CVE-2026-47089: Missing Authorization4.3 MediumN/A0%Jul 16, 2026
CVE-2026-47088: Buffer Over-read3.1 LowN/A0%Jul 16, 2026
CVE-2026-47087: Operation on a Resource after Expiration or Release3.5 LowN/A0%Jul 16, 2026
CVE-2026-47086: Incorrect Authorization3.5 LowN/A0%Jul 16, 2026
CVE-2026-47085: Generation of Predictable Numbers or Identifiers4.0 MediumN/A0%Jul 16, 2026
CVE-2026-47084: Incorrect Authorization6.5 MediumN/A0%Jul 16, 2026
CVE-2026-47083: Observable Response Discrepancy4.3 MediumN/A0%Jul 16, 2026
CVE-2026-47082: Incorrect Authorization5.4 MediumN/A0%Jul 16, 2026
CVE-2026-47081: Incorrect Authorization3.1 LowN/A0%Jul 16, 2026
CVE-2026-46515: Missing AuthorizationN/A9.3 Critical1%Jul 16, 2026
CVE-2026-46514: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Jul 16, 2026
CVE-2026-46513: Plaintext Storage of a Password7.4 HighN/A0%Jul 16, 2026
CVE-2026-46512: Improper Control of Generation of Code9.9 CriticalN/A1%Jul 16, 2026
CVE-2026-46404: Server-Side Request Forgery (SSRF)6.8 MediumN/A0%Jul 16, 2026
CVE-2026-46378: Loop with Unreachable Exit Condition6.2 MediumN/A0%Jul 16, 2026
CVE-2026-46377: Improper Validation of Array Index6.2 MediumN/A0%Jul 16, 2026
CVE-2026-46353: Improper Access Control8.1 HighN/A0%Jul 16, 2026
CVE-2026-46351: Use of Insufficiently Random Values8.1 HighN/A0%Jul 16, 2026
40626-40650 of 657253