The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-50782: Improper Restriction of XML External Entity Reference7.5 HighN/A0%Jul 29, 2026
CVE-2026-46678: Server-Side Request Forgery (SSRF)5.9 MediumN/A0%Jul 29, 2026
CVE-2026-16728: Inconsistent Interpretation of HTTP Requests6.5 MediumN/A0%Jul 29, 2026
CVE-2026-13309: Stack-based Buffer Overflow6.8 MediumN/A0%Jul 29, 2026
CVE-2026-13308: Integer Underflow (Wrap or Wraparound)8.1 HighN/A1%Jul 29, 2026
CVE-2026-13307: Heap-based Buffer Overflow6.8 MediumN/A0%Jul 29, 2026
CVE-2026-13306: Missing Authentication for Critical Function4.3 MediumN/A0%Jul 29, 2026
CVE-2026-13305: Improper Verification of Cryptographic Signature6.4 MediumN/A0%Jul 29, 2026
CVE-2025-65340: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jul 29, 2026
CVE-2025-65337: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 29, 2026
CVE-2026-6336: Incorrect Authorization5.3 MediumN/A0%Jul 29, 2026
CVE-2026-6267: Insertion of Sensitive Information Into Sent Data5.3 MediumN/A1%Jul 29, 2026
CVE-2026-6102: Origin Validation Error7.8 HighN/A0%Jul 29, 2026
CVE-2026-67436: Improper Input ValidationN/A8.3 High0%Jul 29, 2026
CVE-2026-67435: Exposure of Sensitive Information to an Unauthorized ActorN/A6.0 Medium0%Jul 29, 2026
CVE-2026-67433: Improper Link Resolution Before File AccessN/A5.8 Medium0%Jul 29, 2026
CVE-2026-67432: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Jul 29, 2026
CVE-2026-67431: Improper Access ControlN/A8.3 High0%Jul 29, 2026
CVE-2026-67430: Missing Release of Memory after Effective Lifetime5.3 MediumN/A0%Jul 29, 2026
CVE-2026-63119: Uncontrolled Resource Consumption6.2 MediumN/A0%Jul 29, 2026
CVE-2026-63118: Origin Validation ErrorN/A6.9 Medium0%Jul 29, 2026
CVE-2026-5492: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A2%Jul 29, 2026
CVE-2026-5491: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A2%Jul 29, 2026
CVE-2026-5490: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A1%Jul 29, 2026
CVE-2026-5489: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A2%Jul 29, 2026
44576-44600 of 417096