The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-48440: Heap-based Buffer Overflow8.1 HighN/A1%Aug 11, 2026
CVE-2026-48439: Uncontrolled Resource Consumption7.5 HighN/A1%Aug 11, 2026
CVE-2026-48438: NULL Pointer Dereference7.5 HighN/A1%Aug 11, 2026
CVE-2026-48437: Improper Certificate Validation5.5 MediumN/A0%Aug 11, 2026
CVE-2026-48436: Improper Input Validation6.5 MediumN/A1%Aug 11, 2026
CVE-2026-48435: Integer Underflow (Wrap or Wraparound)6.2 MediumN/A0%Aug 11, 2026
CVE-2026-48434: Uncontrolled Resource Consumption6.2 MediumN/A0%Aug 11, 2026
CVE-2026-48387: Integer Overflow or Wraparound6.2 MediumN/A0%Aug 11, 2026
CVE-2026-48386: Use of a Broken or Risky Cryptographic Algorithm7.5 HighN/A1%Aug 11, 2026
CVE-2026-48385: Improper Neutralization of Special Elements used in an OS Command7.7 HighN/A2%Aug 11, 2026
CVE-2026-48384: Improper Input Validation4.9 MediumN/A1%Aug 11, 2026
CVE-2026-48376: Improper Encoding or Escaping of Output5.4 MediumN/A1%Aug 11, 2026
CVE-2026-48375: Incorrect Authorization6.5 MediumN/A1%Aug 11, 2026
CVE-2026-48362: Improper Neutralization of Special Elements used in an OS Command10.0 CriticalN/A4%Aug 11, 2026
CVE-2026-47922: Server-Side Request Forgery (SSRF)4.7 MediumN/A1%Aug 11, 2026
CVE-2026-47704: Authorization Bypass Through User-Controlled KeyN/A7.1 High1%Aug 11, 2026
CVE-2026-47285: Improper Neutralization of Special Elements used in a Command6.5 MediumN/A1%Aug 11, 2026
CVE-2026-43606: Observable Timing DiscrepancyN/A8.5 High0%Aug 11, 2026
CVE-2026-39452: Protection Mechanism Failure7.3 High6.3 Medium0%Aug 11, 2026
CVE-2026-35502: Deserialization of Untrusted DataN/A4.6 Medium0%Aug 11, 2026
CVE-2026-34635: Use of Hard-coded Cryptographic Key8.4 HighN/A0%Aug 11, 2026
CVE-2026-34175: Uncontrolled Search Path ElementN/A5.4 Medium0%Aug 11, 2026
CVE-2026-32791: Untrusted Search PathN/A5.4 Medium0%Aug 11, 2026
CVE-2026-32788: Uncontrolled Search Path ElementN/A5.4 Medium0%Aug 11, 2026
CVE-2026-32677: Improper Limitation of a Pathname to a Restricted DirectoryN/A5.4 Medium0%Aug 11, 2026
22751-22775 of 397085