The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-72506: Incorrectly Specified Destination in a Communication Channel5.4 Medium5.1 Medium0%Aug 13, 2026
CVE-2026-19182: Incorrect Authorization4.3 MediumN/A0%Aug 13, 2026
CVE-2026-19135: Use of Externally-Controlled Input to Select Classes or Code5.4 MediumN/A0%Aug 13, 2026
CVE-2026-18728: Integer Underflow (Wrap or Wraparound)6.5 MediumN/A0%Aug 13, 2026
CVE-2026-0301: Use of Uninitialized Resource7.5 High1.7 Low0%Aug 13, 2026
CVE-2026-0299: Untrusted Search Path7.8 High5.9 Medium0%Aug 13, 2026
CVE-2026-0298: Improper Control of Generation of Code8.1 High5.2 Medium0%Aug 13, 2026
CVE-2026-0297: Out-of-bounds Write8.1 High5.2 Medium0%Aug 13, 2026
CVE-2026-0296: Improper Certificate Validation7.4 High4.5 Medium0%Aug 13, 2026
CVE-2026-0295: Concurrent Execution using Shared Resource with Improper Synchronization7.0 High4.1 Medium0%Aug 13, 2026
CVE-2026-0294: Uncontrolled Search Path Element7.8 High6.0 Medium0%Aug 13, 2026
CVE-2026-0293: Protection Mechanism Failure6.0 Medium5.6 Medium0%Aug 13, 2026
CVE-2026-0292: Authentication Bypass by Spoofing6.0 Medium2.1 Low0%Aug 13, 2026
CVE-2026-0291: Improper Link Resolution Before File Access4.4 Medium1.1 Low0%Aug 13, 2026
CVE-2026-0290: Insufficiently Protected Credentials5.5 Medium0.5 Low0%Aug 13, 2026
CVE-2026-0289: Insufficiently Protected Credentials6.5 Medium0.5 Low0%Aug 13, 2026
CVE-2026-50544: Creation of Temporary File in Directory with Insecure Permissions6.3 MediumN/A0%Aug 13, 2026
CVE-2026-49819: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Aug 13, 2026
CVE-2026-49473: Interpretation Conflict8.8 HighN/A0%Aug 13, 2026
CVE-2026-48791: Improper Verification of Cryptographic Signature2.0 LowN/A0%Aug 13, 2026
CVE-2026-46688: URL Redirection to Untrusted SiteN/A6.9 Medium0%Aug 13, 2026
CVE-2026-46382: Server-Side Request Forgery (SSRF)N/A8.7 High0%Aug 13, 2026
CVE-2026-17431: Improper Neutralization of Special Elements used in an OS Command6.1 MediumN/A1%Aug 13, 2026
CVE-2026-16770: Improper Neutralization of Argument Delimiters in a Command9.8 CriticalN/A1%Aug 13, 2026
CVE-2026-71194: Incorrect Resource Transfer Between Spheres6.8 MediumN/A1%Aug 12, 2026
21926-21950 of 390695