The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-59867: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A2%Jul 16, 2026
CVE-2026-59866: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.3 Critical1%Jul 16, 2026
CVE-2026-59865: Improper Control of Generation of CodeN/A9.3 Critical4%Jul 16, 2026
CVE-2026-59864: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.3 Critical1%Jul 16, 2026
CVE-2026-57206: Missing Authentication for Critical Function8.6 HighN/A1%Jul 16, 2026
CVE-2026-57205: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A1%Jul 16, 2026
CVE-2026-55440: Uncontrolled Resource Consumption6.5 MediumN/A1%Jul 16, 2026
CVE-2026-54733: Improper Verification of Cryptographic SignatureN/A9.3 Critical1%Jul 16, 2026
CVE-2026-54568: Authorization Bypass Through User-Controlled Key4.3 MediumN/A1%Jul 16, 2026
CVE-2026-53598: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Jul 16, 2026
CVE-2026-53597: Improper Control of Generation of CodeN/A8.7 High1%Jul 16, 2026
CVE-2026-45695: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A2%Jul 16, 2026
CVE-2026-14890: Deserialization of Untrusted Data9.1 CriticalN/A1%Jul 16, 2026
CVE-2026-12379: URL Redirection to Untrusted SiteN/A6.8 Medium0%Jul 16, 2026
CVE-2025-45868: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A1%Jul 16, 2026
CVE-2026-59863: Improper Limitation of a Pathname to a Restricted DirectoryN/A7.0 High1%Jul 16, 2026
CVE-2026-59862: Improper Control of Generation of Code7.5 HighN/A1%Jul 16, 2026
CVE-2026-59861: Improper Control of Generation of Code7.5 HighN/A2%Jul 16, 2026
CVE-2026-59860: Improper Control of Generation of CodeN/A8.7 High1%Jul 16, 2026
CVE-2026-59859: Improper Control of Generation of CodeN/A8.7 High1%Jul 16, 2026
CVE-2026-59237: Authorization Bypass Through User-Controlled KeyN/A6.9 Medium1%Jul 16, 2026
CVE-2026-14254: Improper Restriction of Excessive Authentication AttemptsN/A8.3 High1%Jul 16, 2026
CVE-2026-5674: Uncontrolled Search Path Element8.8 HighN/A0%Jul 16, 2026
CVE-2026-56456: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Jul 16, 2026
CVE-2026-56455: Stack-based Buffer Overflow7.5 HighN/A0%Jul 16, 2026
40701-40725 of 657253