The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-46591: Improper Neutralization of Special Elements in Data Query Logic8.2 HighN/A1%Jul 6, 2026
CVE-2026-46590: Deserialization of Untrusted Data8.8 HighN/A1%Jul 6, 2026
CVE-2026-46585: Improper Input Validation7.5 HighN/A1%Jul 6, 2026
CVE-2026-46584: Improper Input Validation3.7 LowN/A1%Jul 6, 2026
CVE-2026-46457: Improper Input Validation7.5 HighN/A1%Jul 6, 2026
CVE-2026-46456: Improper Input Validation9.8 CriticalN/A1%Jul 6, 2026
CVE-2026-46455: Insufficient Session Expiration9.8 CriticalN/A1%Jul 6, 2026
CVE-2026-46454: Improper Input Validation9.8 CriticalN/A1%Jul 6, 2026
CVE-2026-46453: Improper Input Validation5.3 MediumN/A1%Jul 6, 2026
CVE-2026-43867: Deserialization of Untrusted Data9.8 CriticalN/A1%Jul 6, 2026
CVE-2026-43866: Deserialization of Untrusted Data7.3 HighN/A1%Jul 6, 2026
CVE-2026-43865: Deserialization of Untrusted Data8.1 HighN/A1%Jul 6, 2026
CVE-2026-42527: Deserialization of Untrusted Data8.1 HighN/A1%Jul 6, 2026
CVE-2026-40859: Deserialization of Untrusted Data8.1 HighN/A1%Jul 6, 2026
CVE-2026-40047: Improper Neutralization of Argument Delimiters in a Command9.1 CriticalN/A2%Jul 6, 2026
CVE-2026-24014: Improper Access Control9.8 CriticalN/A1%Jul 6, 2026
CVE-2026-24013: Authentication Bypass by Spoofing9.1 CriticalN/A1%Jul 6, 2026
CVE-2026-24012: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 6, 2026
CVE-2026-47896: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.9 High1%Jul 3, 2026
CVE-2026-47898: Improper Restriction of XML External Entity Reference9.8 Critical4.0 Medium0%Jul 3, 2026
CVE-2026-47897: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.9 High1%Jul 3, 2026
CVE-2026-54428: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Jul 1, 2026
CVE-2026-54399: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 1, 2026
CVE-2026-55223: Deserialization of Untrusted DataN/A6.3 Medium0%Jun 30, 2026
CVE-2025-53648: Improper Neutralization of Special Elements used in an SQL Command5.4 MediumN/A1%Jun 30, 2026
951-975 of 4463