The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-35287: Improper Access Control7.5 HighN/A0%Jul 21, 2026
CVE-2026-34316: Improper Access Control6.1 MediumN/A0%Jul 21, 2026
CVE-2026-21954: Improper Access Control4.3 MediumN/A0%Jul 21, 2026
CVE-2026-21953: Improper Access Control3.3 LowN/A0%Jul 21, 2026
CVE-2026-16484: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Jul 21, 2026
CVE-2026-10680: Out-of-bounds Read7.6 HighN/A0%Jul 21, 2026
CVE-2026-10679: Divide By Zero5.5 MediumN/A0%Jul 21, 2026
CVE-2026-10678: NULL Pointer Dereference8.1 HighN/A0%Jul 21, 2026
CVE-2026-10677: Missing Release of Memory after Effective Lifetime6.5 MediumN/A0%Jul 21, 2026
CVE-2026-10675: Uncontrolled Resource Consumption6.5 MediumN/A0%Jul 21, 2026
CVE-2026-10674: Reachable Assertion5.5 MediumN/A0%Jul 21, 2026
CVE-2026-65319: Missing Authentication for Critical Function7.5 High8.7 High0%Jul 21, 2026
CVE-2026-60718: Uncontrolled Resource Consumption6.5 MediumN/A0%Jul 21, 2026
CVE-2026-60182: Uncontrolled Resource Consumption4.4 MediumN/A0%Jul 21, 2026
CVE-2026-8983: Use of Hard-coded Credentials9.8 Critical10.0 Critical0%Jul 21, 2026
CVE-2026-8982: Use of Hard-coded Credentials8.1 High10.0 Critical0%Jul 21, 2026
CVE-2026-65058: Improperly Implemented Security Check for Standard5.3 Medium5.9 Medium0%Jul 21, 2026
CVE-2026-65057: Server-Side Request Forgery (SSRF)9.3 Critical9.2 Critical0%Jul 21, 2026
CVE-2026-65056: Server-Side Request Forgery (SSRF)8.2 High8.3 High0%Jul 21, 2026
CVE-2026-65055: Missing Authorization5.3 Medium6.9 Medium0%Jul 21, 2026
CVE-2026-65054: Incorrect Authorization3.1 Low8.2 High0%Jul 21, 2026
CVE-2026-64881: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High2%Jul 21, 2026
CVE-2026-64822: Observable Discrepancy5.3 Medium6.9 Medium0%Jul 21, 2026
CVE-2026-64821: Cross-Site Request Forgery (CSRF)4.3 Medium5.3 Medium0%Jul 21, 2026
CVE-2026-63764: Server-Side Request Forgery (SSRF)8.6 High7.7 High0%Jul 21, 2026
48076-48100 of 413066