The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-7521: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A0%Jul 28, 2026
CVE-2026-6879: Inefficient Algorithmic ComplexityN/A2.0 Low0%Jul 28, 2026
CVE-2026-67178: URL Redirection to Untrusted SiteN/A7.8 High1%Jul 28, 2026
CVE-2026-67174: Improper Neutralization of Input During Web Page GenerationN/A9.2 Critical1%Jul 28, 2026
CVE-2026-66713: Deserialization of Untrusted Data9.8 CriticalN/A2%Jul 28, 2026
CVE-2026-66299: Uncontrolled Resource Consumption5.3 MediumN/A1%Jul 28, 2026
CVE-2026-63727: Incorrect Use of Privileged APIs8.8 High8.7 High0%Jul 28, 2026
CVE-2026-51261: Undefined Security WeaknessN/AN/A0%Jul 28, 2026
CVE-2026-51260: Undefined Security WeaknessN/AN/A0%Jul 28, 2026
CVE-2026-51259: Undefined Security WeaknessN/AN/A0%Jul 28, 2026
CVE-2026-51254: Undefined Security WeaknessN/AN/A0%Jul 28, 2026
CVE-2026-51252: Undefined Security WeaknessN/AN/A0%Jul 28, 2026
CVE-2026-51251: Undefined Security WeaknessN/AN/A0%Jul 28, 2026
CVE-2026-67173: Server-Side Request Forgery (SSRF)N/A5.1 Medium0%Jul 28, 2026
CVE-2026-66922: Improperly Controlled Modification of Object Prototype AttributesN/A5.1 Medium0%Jul 28, 2026
CVE-2026-66921: Improper Neutralization of Input During Web Page GenerationN/A6.3 Medium0%Jul 28, 2026
CVE-2026-61487: Improper Authorization6.5 MediumN/A0%Jul 28, 2026
CVE-2026-59878: Improper Input Validation7.5 HighN/A1%Jul 28, 2026
CVE-2026-7187: Missing Authentication for Critical Function8.8 HighN/A0%Jul 28, 2026
CVE-2026-66920: Uncontrolled RecursionN/A8.2 High0%Jul 28, 2026
CVE-2026-66919: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium0%Jul 28, 2026
CVE-2026-66918: Improper Neutralization of Input During Web Page GenerationN/A8.2 High0%Jul 28, 2026
CVE-2026-66913: Uncontrolled Resource ConsumptionN/A6.9 Medium0%Jul 28, 2026
CVE-2026-65882: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 28, 2026
CVE-2026-65881: Initialization of a Resource with an Insecure Default7.5 HighN/A0%Jul 28, 2026
44476-44500 of 522616