The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-59730: URL Redirection to Untrusted SiteN/A2.1 Low0%Jul 27, 2026
CVE-2026-59728: XML Injection (aka Blind XPath Injection)4.3 MediumN/A0%Jul 27, 2026
CVE-2026-43822: Use After Free9.8 CriticalN/A1%Jul 27, 2026
CVE-2026-43821: Improper Access Control6.5 MediumN/A0%Jul 27, 2026
CVE-2026-43819: Improper Access Control5.5 MediumN/A0%Jul 27, 2026
CVE-2026-43818: Integer Overflow or Wraparound8.8 HighN/A1%Jul 27, 2026
CVE-2026-43817: Out-of-bounds Read5.5 MediumN/A0%Jul 27, 2026
CVE-2026-43816: Out-of-bounds Write5.5 MediumN/A0%Jul 27, 2026
CVE-2026-43814: Use After Free9.8 CriticalN/A1%Jul 27, 2026
CVE-2026-43813: Improper Input Validation7.1 HighN/A0%Jul 27, 2026
CVE-2026-43812: Use After Free9.8 CriticalN/A1%Jul 27, 2026
CVE-2026-43811: Concurrent Execution using Shared Resource with Improper Synchronization4.7 MediumN/A0%Jul 27, 2026
CVE-2026-43810: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A1%Jul 27, 2026
CVE-2026-43809: Out-of-bounds Read9.8 CriticalN/A1%Jul 27, 2026
CVE-2026-43807: Buffer Copy without Checking Size of Input9.8 CriticalN/A1%Jul 27, 2026
CVE-2026-43806: Uncontrolled Resource Consumption5.5 MediumN/A0%Jul 27, 2026
CVE-2026-43805: Concurrent Execution using Shared Resource with Improper Synchronization9.8 CriticalN/A0%Jul 27, 2026
CVE-2026-43804: Uncontrolled Resource Consumption6.5 MediumN/A0%Jul 27, 2026
CVE-2026-43803: Out-of-bounds Write9.8 CriticalN/A1%Jul 27, 2026
CVE-2026-43802: Out-of-bounds Write9.8 CriticalN/A1%Jul 27, 2026
CVE-2026-43801: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Jul 27, 2026
CVE-2026-43800: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Jul 27, 2026
CVE-2026-43799: Use After Free9.8 CriticalN/A1%Jul 27, 2026
CVE-2026-43797: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Jul 27, 2026
CVE-2026-43796: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Jul 27, 2026
44451-44475 of 522616