The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-0701: Improper Neutralization of Special Elements used in an SQL Command7.2 High2.0 Low0%Jan 8, 2026
CVE-2026-0700: Improper Neutralization of Special Elements used in an SQL Command9.8 Critical5.5 Medium0%Jan 8, 2026
CVE-2026-0699: Improper Neutralization of Special Elements used in an SQL Command7.2 High2.0 Low0%Jan 8, 2026
CVE-2025-13679: Missing Authorization6.5 MediumN/A0%Jan 8, 2026
CVE-2026-0698: Improper Neutralization of Special Elements used in an SQL Command7.2 High2.0 Low0%Jan 8, 2026
CVE-2026-0697: Improper Neutralization of Special Elements used in an SQL Command7.2 High2.0 Low0%Jan 8, 2026
CVE-2026-22581: Undefined Security WeaknessN/AN/AN/AJan 8, 2026
CVE-2026-22580: Undefined Security WeaknessN/AN/AN/AJan 8, 2026
CVE-2026-22579: Undefined Security WeaknessN/AN/AN/AJan 8, 2026
CVE-2026-22578: Undefined Security WeaknessN/AN/AN/AJan 8, 2026
CVE-2026-22577: Undefined Security WeaknessN/AN/AN/AJan 8, 2026
CVE-2026-21427: Uncontrolled Search Path Element7.8 High8.5 High0%Jan 8, 2026
CVE-2026-0707: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization5.3 MediumN/A0%Jan 8, 2026
CVE-2025-14275: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 8, 2026
CVE-2025-12640: Missing Authorization4.3 MediumN/A0%Jan 8, 2026
CVE-2019-25296: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A0%Jan 8, 2026
CVE-2026-21883: Missing Origin Validation in WebSockets5.4 Medium4.5 Medium0%Jan 8, 2026
CVE-2026-21881: Improper Authentication9.1 CriticalN/A0%Jan 8, 2026
CVE-2026-21880: Improper Neutralization of Special Elements used in an LDAP Query5.3 MediumN/A0%Jan 8, 2026
CVE-2026-21879: URL Redirection to Untrusted Site4.7 MediumN/A0%Jan 8, 2026
CVE-2019-25295: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Jan 8, 2026
CVE-2026-22035: Improper Neutralization of Special Elements used in an OS Command7.7 HighN/A0%Jan 8, 2026
CVE-2026-21877: Improper Control of Generation of Code9.9 CriticalN/A15%Jan 8, 2026
CVE-2026-21868: Inefficient Regular Expression Complexity7.5 HighN/A0%Jan 8, 2026
CVE-2026-21875: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jan 8, 2026
89576-89600 of 413066