The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-32677: Improper Limitation of a Pathname to a Restricted DirectoryN/A5.4 Medium0%Aug 11, 2026
CVE-2026-28757: Protection Mechanism FailureN/A5.4 Medium0%Aug 11, 2026
CVE-2026-28729: Integer Overflow or WraparoundN/A2.4 Low0%Aug 11, 2026
CVE-2026-28707: Protection Mechanism FailureN/A5.4 Medium0%Aug 11, 2026
CVE-2026-28700: Uncontrolled Search Path ElementN/A5.4 Medium0%Aug 11, 2026
CVE-2026-27765: Improper Input Validation5.5 Medium6.8 Medium0%Aug 11, 2026
CVE-2026-25652: Incorrect Authorization7.8 HighN/A0%Aug 11, 2026
CVE-2026-25194: Out-of-bounds WriteN/A1.8 Low0%Aug 11, 2026
CVE-2026-24911: Stack-based Buffer Overflow8.6 High8.3 High0%Aug 11, 2026
CVE-2026-24693: Protection Mechanism FailureN/A5.4 Medium0%Aug 11, 2026
CVE-2026-24099: Use After Free5.1 Medium5.9 Medium0%Aug 11, 2026
CVE-2026-22887: Improper Restriction of Operations within the Bounds of a Memory Buffer7.4 High8.3 High0%Aug 11, 2026
CVE-2026-21400: Protection Mechanism FailureN/A5.4 Medium0%Aug 11, 2026
CVE-2026-21399: Heap-based Buffer OverflowN/A6.9 Medium0%Aug 11, 2026
CVE-2026-21387: Protection Mechanism FailureN/A5.4 Medium0%Aug 11, 2026
CVE-2026-21279: Improper Input Validation8.2 HighN/A1%Aug 11, 2026
CVE-2026-21273: Improper Input Validation8.7 HighN/A1%Aug 11, 2026
CVE-2026-21269: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 11, 2026
CVE-2026-20913: Improper Input Validation5.3 Medium4.8 Medium0%Aug 11, 2026
CVE-2026-20908: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A5.8 Medium0%Aug 11, 2026
CVE-2026-20906: Protection Mechanism FailureN/A5.4 Medium0%Aug 11, 2026
CVE-2026-20903: Protection Mechanism FailureN/A5.4 Medium0%Aug 11, 2026
CVE-2026-20898: Improper Access Control7.2 High8.5 High0%Aug 11, 2026
CVE-2026-20891: Improper Authentication7.9 High6.3 Medium0%Aug 11, 2026
CVE-2026-20890: Improper Privilege Management7.3 High7.1 High0%Aug 11, 2026
22826-22850 of 400222