The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-58151: Uncontrolled Resource Consumption7.5 High8.7 High1%Jul 29, 2026
CVE-2026-58150: Inconsistent Interpretation of HTTP Requests10.0 Critical7.8 High1%Jul 29, 2026
CVE-2026-57834: Inconsistent Interpretation of HTTP Requests10.0 Critical7.0 High1%Jul 29, 2026
CVE-2026-41920: Improper Access Control9.3 Critical7.0 High1%Jul 29, 2026
CVE-2026-33930: Stack-based Buffer Overflow5.9 Medium8.2 High1%Jul 29, 2026
CVE-2026-33267: Improper Input Validation9.1 Critical7.7 High1%Jul 29, 2026
CVE-2026-24033: Inconsistent Interpretation of HTTP Requests5.3 Medium6.9 Medium1%Jul 29, 2026
CVE-2026-22068: Regular Expression without Anchors5.3 Medium6.9 Medium1%Jul 29, 2026
CVE-2026-67178: URL Redirection to Untrusted SiteN/A7.8 High1%Jul 28, 2026
CVE-2026-66713: Deserialization of Untrusted Data9.8 CriticalN/A2%Jul 28, 2026
CVE-2026-66299: Uncontrolled Resource Consumption5.3 MediumN/A1%Jul 28, 2026
CVE-2026-61487: Improper Authorization6.5 MediumN/A0%Jul 28, 2026
CVE-2026-59878: Improper Input Validation7.5 HighN/A1%Jul 28, 2026
CVE-2026-66391: Use of Insufficiently Random Values6.5 MediumN/A1%Jul 27, 2026
CVE-2026-66390: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Jul 27, 2026
CVE-2026-66053: Improper Validation of Certificate with Host Mismatch5.9 MediumN/A0%Jul 27, 2026
CVE-2026-58662: Improper Validation of Specified Quantity in Input9.1 Critical8.7 High1%Jul 27, 2026
CVE-2026-58389: Allocation of Resources Without Limits or Throttling7.5 High8.7 High1%Jul 27, 2026
CVE-2026-58023: Out-of-bounds Read9.1 Critical6.9 Medium1%Jul 27, 2026
CVE-2026-55971: Heap-based Buffer Overflow9.8 Critical9.3 Critical1%Jul 27, 2026
CVE-2026-55970: Buffer Over-read6.5 Medium6.9 Medium1%Jul 27, 2026
CVE-2026-55969: Integer Overflow or Wraparound7.5 High8.7 High1%Jul 27, 2026
CVE-2026-55968: Inefficient Algorithmic Complexity7.5 High8.7 High1%Jul 27, 2026
CVE-2026-49158: Improper Handling of Highly Compressed Data (Data Amplification)7.5 HighN/A1%Jul 27, 2026
CVE-2026-48586: Improper Handling of Highly Compressed Data (Data Amplification)7.5 High8.7 High1%Jul 27, 2026
826-850 of 4460