The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-44185: Buffer Over-read7.3 HighN/A1%Jun 8, 2026
CVE-2026-44119: Improper Privilege Management5.5 MediumN/A0%Jun 8, 2026
CVE-2026-43951: Out-of-bounds Read6.5 MediumN/A1%Jun 8, 2026
CVE-2026-42536: Heap-based Buffer Overflow7.5 HighN/A3%Jun 8, 2026
CVE-2026-42535: Exposure of Resource to Wrong Sphere9.1 CriticalN/A1%Jun 8, 2026
CVE-2026-34356: Heap-based Buffer Overflow7.5 HighN/A1%Jun 8, 2026
CVE-2026-34355: Heap-based Buffer Overflow7.5 HighN/A1%Jun 8, 2026
CVE-2026-29170: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Jun 8, 2026
CVE-2026-29167: Use After Free9.8 CriticalN/A1%Jun 8, 2026
CVE-2026-49975: Memory Allocation with Excessive Size ValueN/AN/A4%Jun 8, 2026
CVE-2026-47430: Improper Input Validation7.5 High9.5 Critical1%Jun 8, 2026
CVE-2026-50076: Deserialization of Untrusted Data9.1 CriticalN/A1%Jun 4, 2026
CVE-2026-43926: Observable Response DiscrepancyN/A6.3 Medium0%Jun 4, 2026
CVE-2026-47065: Deserialization of Untrusted Data9.8 CriticalN/A1%Jun 3, 2026
CVE-2026-45080: Exposure of Sensitive Information to an Unauthorized ActorN/A6.9 Medium0%Jun 2, 2026
CVE-2026-44367: Improper Handling of Case Sensitivity2.7 LowN/A0%Jun 2, 2026
CVE-2026-46718: Use of Externally-Controlled Input to Select Classes or Code6.5 MediumN/A1%Jun 2, 2026
CVE-2026-41115: Improper Authorization4.3 MediumN/A0%Jun 2, 2026
CVE-2026-49328: Server-Side Request Forgery (SSRF)5.3 MediumN/A1%Jun 1, 2026
CVE-2026-49361: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Jun 1, 2026
CVE-2026-49298: Insertion of Sensitive Information into Externally-Accessible File or Directory8.8 HighN/A1%Jun 1, 2026
CVE-2026-49270: Exposure of Sensitive Information Through Metadata5.9 MediumN/A1%Jun 1, 2026
CVE-2026-49267: Improper Certificate Validation5.9 MediumN/A0%Jun 1, 2026
CVE-2026-49157: Incorrect Default Permissions8.8 HighN/A1%Jun 1, 2026
CVE-2026-48827: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A1%Jun 1, 2026
1076-1100 of 4464