The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-14479: Improper Validation of Specified Index, Position, or Offset in Input5.5 MediumN/A0%Aug 12, 2026
CVE-2026-14478: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Aug 12, 2026
CVE-2025-59324: Improper Verification of Cryptographic Signature9.1 CriticalN/A0%Aug 12, 2026
CVE-2025-59323: Insufficient Verification of Data Authenticity8.4 HighN/A0%Aug 12, 2026
CVE-2025-59322: Generation of Predictable IV with CBC Mode7.5 HighN/A0%Aug 12, 2026
CVE-2025-59321: Initialization of a Resource with an Insecure Default9.8 CriticalN/A1%Aug 12, 2026
CVE-2025-59320: Insecure Storage of Sensitive Information4.6 MediumN/A0%Aug 12, 2026
CVE-2025-59319: Authentication Bypass by Spoofing7.2 HighN/A1%Aug 12, 2026
CVE-2026-67285: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.2 Critical1%Aug 12, 2026
CVE-2026-47232: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Aug 12, 2026
CVE-2026-47231: Authorization Bypass Through User-Controlled Key8.1 HighN/A0%Aug 12, 2026
CVE-2026-47230: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Aug 12, 2026
CVE-2026-47229: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Aug 12, 2026
CVE-2026-47228: Cross-Site Request Forgery (CSRF)5.2 MediumN/A0%Aug 12, 2026
CVE-2026-47227: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Aug 12, 2026
CVE-2026-16999: Improper Restriction of XML External Entity Reference6.3 MediumN/A0%Aug 12, 2026
CVE-2025-59327: Improper Verification of Cryptographic Signature7.5 HighN/A0%Aug 12, 2026
CVE-2025-59326: Protection Mechanism Failure9.8 CriticalN/A1%Aug 12, 2026
CVE-2025-59325: Missing Encryption of Sensitive Data7.5 HighN/A0%Aug 12, 2026
CVE-2026-71408: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Aug 12, 2026
CVE-2026-71407: Stack-based Buffer Overflow8.1 HighN/A0%Aug 12, 2026
CVE-2026-70468: Authentication Bypass Using an Alternate Path or Channel8.1 HighN/A0%Aug 12, 2026
CVE-2026-70467: Server-Side Request Forgery (SSRF)3.8 LowN/A0%Aug 12, 2026
CVE-2026-57858: Improper Neutralization of Input During Web Page Generation8.9 High9.3 Critical0%Aug 12, 2026
CVE-2026-53996: Missing Authorization7.0 High7.3 High0%Aug 12, 2026
22326-22350 of 677876