The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-40633: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Jul 15, 2026
CVE-2026-8281: Undefined Security WeaknessN/AN/AN/AJul 15, 2026
CVE-2026-58077: Improper Neutralization of Input During Web Page GenerationN/A8.7 High0%Jul 15, 2026
CVE-2026-57833: Improper Neutralization of Input During Web Page GenerationN/A8.6 High0%Jul 15, 2026
CVE-2026-57821: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/A1%Jul 15, 2026
CVE-2026-56287: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/A1%Jul 15, 2026
CVE-2026-49501: Improper Privilege Management6.7 MediumN/A0%Jul 15, 2026
CVE-2026-35152: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A3%Jul 15, 2026
CVE-2026-57832: Improper Neutralization of Special Elements used in an SQL CommandN/A8.7 High0%Jul 15, 2026
CVE-2026-57831: Improper Neutralization of Special Elements used in an SQL CommandN/A8.7 High0%Jul 15, 2026
CVE-2026-15804: Improper Neutralization of Special Elements used in an SQL Command8.8 High8.7 High1%Jul 15, 2026
CVE-2026-15583: Externally Controlled Reference to a Resource in Another Sphere8.6 HighN/A1%Jul 15, 2026
CVE-2026-14251: Missing Authorization7.7 HighN/A0%Jul 15, 2026
CVE-2026-42936: Uncontrolled Search Path Element7.8 High8.4 High0%Jul 15, 2026
CVE-2026-12512: Improper Neutralization of Special Elements used in an SQL Command8.6 HighN/A0%Jul 15, 2026
CVE-2026-12281: Improper Authentication8.1 HighN/A0%Jul 15, 2026
CVE-2026-11580: Authorization Bypass Through User-Controlled Key5.5 MediumN/A0%Jul 15, 2026
CVE-2026-11579: Unrestricted Upload of File with Dangerous Type5.3 MediumN/A0%Jul 15, 2026
CVE-2026-8920: Improper Restriction of Communication Channel to Intended EndpointsN/A8.5 High0%Jul 15, 2026
CVE-2026-8919: Permissive Cross-domain Policy with Untrusted DomainsN/A7.2 High0%Jul 15, 2026
CVE-2026-15030: Out-of-bounds ReadN/A5.6 Medium0%Jul 15, 2026
CVE-2026-15029: Untrusted Pointer DereferenceN/A8.4 High0%Jul 15, 2026
CVE-2026-13585: Allocation of Resources Without Limits or ThrottlingN/A8.2 High0%Jul 15, 2026
CVE-2026-13385: Improper Validation of Integrity Check ValueN/A9.5 Critical0%Jul 15, 2026
CVE-2026-11851: Improper Neutralization of Special Elements used in an SQL CommandN/A5.9 Medium1%Jul 15, 2026
49001-49025 of 522616