The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-24059: Improper Privilege Management6.5 MediumN/A0%Aug 13, 2026
CVE-2026-23603: Server-Side Request Forgery (SSRF)3.1 LowN/A0%Aug 13, 2026
CVE-2026-13051: Improper Neutralization of Special Elements Used in a Template Engine9.1 CriticalN/A0%Aug 13, 2026
CVE-2026-13048: Improper Neutralization of Directives in Dynamically Evaluated Code8.2 HighN/A0%Aug 13, 2026
CVE-2022-4993: Improper Neutralization of Special Elements Used in a Template Engine9.1 CriticalN/A0%Aug 13, 2026
CVE-2026-73671: URL Redirection to Untrusted Site6.1 Medium5.1 Medium0%Aug 13, 2026
CVE-2026-73670: Improper Neutralization of Special Elements used in an SQL Command7.2 High8.6 High0%Aug 13, 2026
CVE-2026-73576: Use of Predictable Algorithm in Random Number Generator6.5 MediumN/A0%Aug 13, 2026
CVE-2026-73575: Cross-Site Request Forgery (CSRF)3.5 LowN/A0%Aug 13, 2026
CVE-2026-73574: Incorrect Resource Transfer Between Spheres6.5 MediumN/A0%Aug 13, 2026
CVE-2026-73573: Path Traversal: '../filedir'6.5 MediumN/A0%Aug 13, 2026
CVE-2026-73572: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 13, 2026
CVE-2026-73571: Incorrect Authorization4.3 MediumN/A0%Aug 13, 2026
CVE-2026-73570: Improper Neutralization of Special Elements used in an OS Command8.9 HighN/A32%Aug 13, 2026
CVE-2026-73559: Uncontrolled Resource Consumption6.5 MediumN/A0%Aug 13, 2026
CVE-2026-73533: Embedded Malicious Code9.8 Critical9.3 Critical0%Aug 13, 2026
CVE-2026-73532: Embedded Malicious Code9.8 Critical9.3 Critical0%Aug 13, 2026
CVE-2026-73515: Out-of-bounds Read8.1 High7.2 High1%Aug 13, 2026
CVE-2026-73514: Out-of-bounds Write8.8 High8.7 High1%Aug 13, 2026
CVE-2026-55401: NULL Pointer Dereference5.3 Medium6.9 Medium0%Aug 13, 2026
CVE-2026-55400: Integer Overflow or Wraparound6.5 Medium6.0 Medium0%Aug 13, 2026
CVE-2026-19744: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 13, 2026
CVE-2026-19710: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 13, 2026
CVE-2026-19487: Always-Incorrect Control Flow Implementation5.3 MediumN/A0%Aug 13, 2026
CVE-2026-73558: Integer Overflow or Wraparound5.3 MediumN/A0%Aug 13, 2026
20076-20100 of 397021