The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-47704: Authorization Bypass Through User-Controlled KeyN/A7.1 High1%Aug 11, 2026
CVE-2026-47285: Improper Neutralization of Special Elements used in a Command6.5 MediumN/A1%Aug 11, 2026
CVE-2026-43606: Observable Timing DiscrepancyN/A8.5 High0%Aug 11, 2026
CVE-2026-39452: Protection Mechanism Failure7.3 High6.3 Medium0%Aug 11, 2026
CVE-2026-35502: Deserialization of Untrusted DataN/A4.6 Medium0%Aug 11, 2026
CVE-2026-34635: Use of Hard-coded Cryptographic Key8.4 HighN/A0%Aug 11, 2026
CVE-2026-34175: Uncontrolled Search Path ElementN/A5.4 Medium0%Aug 11, 2026
CVE-2026-32791: Untrusted Search PathN/A5.4 Medium0%Aug 11, 2026
CVE-2026-32788: Uncontrolled Search Path ElementN/A5.4 Medium0%Aug 11, 2026
CVE-2026-32677: Improper Limitation of a Pathname to a Restricted DirectoryN/A5.4 Medium0%Aug 11, 2026
CVE-2026-28757: Protection Mechanism FailureN/A5.4 Medium0%Aug 11, 2026
CVE-2026-28729: Integer Overflow or WraparoundN/A2.4 Low0%Aug 11, 2026
CVE-2026-28707: Protection Mechanism FailureN/A5.4 Medium0%Aug 11, 2026
CVE-2026-28700: Uncontrolled Search Path ElementN/A5.4 Medium0%Aug 11, 2026
CVE-2026-27765: Improper Input Validation5.5 Medium6.8 Medium0%Aug 11, 2026
CVE-2026-25652: Incorrect Authorization7.8 HighN/A0%Aug 11, 2026
CVE-2026-25194: Out-of-bounds WriteN/A1.8 Low0%Aug 11, 2026
CVE-2026-24911: Stack-based Buffer Overflow8.6 High8.3 High0%Aug 11, 2026
CVE-2026-24693: Protection Mechanism FailureN/A5.4 Medium0%Aug 11, 2026
CVE-2026-24099: Use After Free5.1 Medium5.9 Medium0%Aug 11, 2026
CVE-2026-22887: Improper Restriction of Operations within the Bounds of a Memory Buffer7.4 High8.3 High0%Aug 11, 2026
CVE-2026-21400: Protection Mechanism FailureN/A5.4 Medium0%Aug 11, 2026
CVE-2026-21399: Heap-based Buffer OverflowN/A6.9 Medium0%Aug 11, 2026
CVE-2026-21387: Protection Mechanism FailureN/A5.4 Medium0%Aug 11, 2026
CVE-2026-21279: Improper Input Validation8.2 HighN/A1%Aug 11, 2026
22776-22800 of 400222