The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-20716: Improper Access Control7.0 High7.2 High0%Aug 11, 2026
CVE-2026-20715: Improper Input ValidationN/A8.2 High0%Aug 11, 2026
CVE-2026-20713: Always-Incorrect Control Flow ImplementationN/A4.5 Medium0%Aug 11, 2026
CVE-2026-20708: Insertion of Sensitive Information into Log FileN/A5.9 Medium0%Aug 11, 2026
CVE-2026-20707: Hardware Logic Contains Race ConditionsN/A6.8 Medium0%Aug 11, 2026
CVE-2026-20705: Insecure Storage of Sensitive Information5.3 Medium6.8 Medium0%Aug 11, 2026
CVE-2026-20702: Protection Mechanism FailureN/A8.9 High0%Aug 11, 2026
CVE-2026-20349: Improper Clearing of Heap Memory Before Release8.6 HighN/A1%Aug 11, 2026
CVE-2026-18247: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Aug 11, 2026
CVE-2026-12571: Improper Authentication9.8 CriticalN/A2%Aug 11, 2026
CVE-2025-8087: Uncontrolled Search Path ElementN/A7.0 High0%Aug 11, 2026
CVE-2025-61970: Incorrect Default PermissionsN/A1.0 Low0%Aug 11, 2026
CVE-2025-48506: Uncontrolled Search Path ElementN/A4.6 Medium0%Aug 11, 2026
CVE-2025-48505: Incorrect Default PermissionsN/A1.0 Low0%Aug 11, 2026
CVE-2025-35987: Omission of Security-relevant InformationN/A4.3 Medium0%Aug 11, 2026
CVE-2025-35973: Improper Handling of ValuesN/A4.5 Medium0%Aug 11, 2026
CVE-2025-31938: Insufficient Granularity of Access ControlN/A4.3 Medium0%Aug 11, 2026
CVE-2025-31936: Improper Handling of Overlap Between Protected Memory Ranges5.7 Medium7.0 High0%Aug 11, 2026
CVE-2025-31356: Insufficient Verification of Data AuthenticityN/A5.7 Medium0%Aug 11, 2026
CVE-2025-0041: Uncontrolled Search Path ElementN/A4.6 Medium0%Aug 11, 2026
CVE-2026-62869: Insufficient Verification of Data Authenticity8.8 HighN/A0%Aug 11, 2026
CVE-2026-50516: Missing Authentication for Critical Function9.4 CriticalN/A1%Aug 11, 2026
CVE-2026-62917: Improper Input Validation4.6 MediumN/A1%Aug 11, 2026
CVE-2026-62839: Insufficiently Protected Credentials6.5 MediumN/A1%Aug 11, 2026
CVE-2026-58639: Server-Side Request Forgery (SSRF)6.5 MediumN/A1%Aug 11, 2026
23051-23075 of 568479