The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-13048: Improper Neutralization of Directives in Dynamically Evaluated Code8.2 HighN/A0%Aug 13, 2026
CVE-2022-4993: Improper Neutralization of Special Elements Used in a Template Engine9.1 CriticalN/A0%Aug 13, 2026
CVE-2026-73671: URL Redirection to Untrusted Site6.1 Medium5.1 Medium0%Aug 13, 2026
CVE-2026-73670: Improper Neutralization of Special Elements used in an SQL Command7.2 High8.6 High0%Aug 13, 2026
CVE-2026-73576: Use of Predictable Algorithm in Random Number Generator6.5 MediumN/A0%Aug 13, 2026
CVE-2026-73575: Cross-Site Request Forgery (CSRF)3.5 LowN/A0%Aug 13, 2026
CVE-2026-73574: Incorrect Resource Transfer Between Spheres6.5 MediumN/A0%Aug 13, 2026
CVE-2026-73573: Path Traversal: '../filedir'6.5 MediumN/A0%Aug 13, 2026
CVE-2026-73572: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 13, 2026
CVE-2026-73571: Incorrect Authorization4.3 MediumN/A0%Aug 13, 2026
CVE-2026-73570: Improper Neutralization of Special Elements used in an OS Command8.9 HighN/A1%Aug 13, 2026
CVE-2026-73559: Uncontrolled Resource Consumption6.5 MediumN/A0%Aug 13, 2026
CVE-2026-73533: Embedded Malicious Code9.8 Critical9.3 Critical0%Aug 13, 2026
CVE-2026-73532: Embedded Malicious Code9.8 Critical9.3 Critical0%Aug 13, 2026
CVE-2026-73515: Out-of-bounds Read8.1 High7.2 High1%Aug 13, 2026
CVE-2026-73514: Out-of-bounds Write8.8 High8.7 High1%Aug 13, 2026
CVE-2026-55401: NULL Pointer Dereference5.3 Medium6.9 Medium0%Aug 13, 2026
CVE-2026-55400: Integer Overflow or Wraparound6.5 Medium6.0 Medium0%Aug 13, 2026
CVE-2026-19744: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 13, 2026
CVE-2026-19710: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 13, 2026
CVE-2026-19487: Always-Incorrect Control Flow Implementation5.3 MediumN/A0%Aug 13, 2026
CVE-2026-73558: Integer Overflow or Wraparound5.3 MediumN/A0%Aug 13, 2026
CVE-2026-73557: Concurrent Execution using Shared Resource with Improper SynchronizationN/A6.3 Medium0%Aug 13, 2026
CVE-2026-73556: Uncontrolled Resource Consumption5.3 MediumN/A0%Aug 13, 2026
CVE-2026-73555: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Aug 13, 2026
20526-20550 of 393236