The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-16119: Incorrect Authorization6.3 Medium2.1 Low0%Jul 18, 2026
CVE-2026-16117: Improper Input Validation10.0 CriticalN/A0%Jul 18, 2026
CVE-2026-11826: Heap-based Buffer Overflow8.8 High8.7 High1%Jul 18, 2026
CVE-2025-71398: Server-Side Request Forgery (SSRF)7.6 High5.8 Medium0%Jul 18, 2026
CVE-2025-71394: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium2.3 Low0%Jul 18, 2026
CVE-2025-71390: Incorrect Authorization8.8 High5.8 Medium0%Jul 18, 2026
CVE-2024-58370: Uncontrolled Recursion6.5 Medium7.1 High0%Jul 18, 2026
CVE-2024-58369: Uncaught Exception6.5 Medium7.1 High0%Jul 18, 2026
CVE-2024-58368: Uncaught Exception7.5 High8.7 High1%Jul 18, 2026
CVE-2024-58367: Improper Authorization6.5 Medium7.1 High0%Jul 18, 2026
CVE-2024-58366: Use of Externally-Controlled Format String8.8 High9.0 Critical1%Jul 18, 2026
CVE-2024-58365: Uncaught Exception6.5 Medium7.1 High0%Jul 18, 2026
CVE-2024-58364: Uncaught Exception6.5 Medium7.1 High0%Jul 18, 2026
CVE-2024-58363: Improper Authentication6.3 Medium5.3 Medium0%Jul 18, 2026
CVE-2024-58362: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)8.8 High8.7 High1%Jul 18, 2026
CVE-2024-58361: Uncaught Exception6.5 Medium7.1 High0%Jul 18, 2026
CVE-2024-58359: Uncaught Exception6.5 Medium7.1 High0%Jul 18, 2026
CVE-2024-58358: Uncaught Exception4.9 Medium6.9 Medium0%Jul 18, 2026
CVE-2024-58357: Uncaught Exception6.5 Medium7.1 High0%Jul 18, 2026
CVE-2024-58356: Incorrect Default Permissions6.3 Medium2.3 Low0%Jul 18, 2026
CVE-2023-54366: Incorrect Default Permissions8.8 High8.7 High0%Jul 18, 2026
CVE-2026-9147: Improper Control of Generation of Code7.8 High8.5 High0%Jul 18, 2026
CVE-2026-59173: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 18, 2026
CVE-2026-16158: Unintended Proxy or Intermediary10.0 CriticalN/A0%Jul 18, 2026
CVE-2026-15631: Improper Limitation of a Pathname to a Restricted Directory10.0 CriticalN/A1%Jul 18, 2026
41226-41250 of 443762