The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-47405: Improper Access Control8.8 HighN/A1%Jul 21, 2026
CVE-2026-15724: Improper Limitation of a Pathname to a Restricted Directory8.7 HighN/A1%Jul 21, 2026
CVE-2026-28321: Improper Access Control9.1 CriticalN/A1%Jul 21, 2026
CVE-2026-28317: Authorization Bypass Through User-Controlled Key9.1 CriticalN/A0%Jul 21, 2026
CVE-2026-28316: Authorization Bypass Through User-Controlled Key9.1 CriticalN/A2%Jul 21, 2026
CVE-2026-28315: Improper Neutralization of Input During Web Page Generation6.2 MediumN/A1%Jul 21, 2026
CVE-2026-28312: Improper Authorization9.1 CriticalN/A1%Jul 21, 2026
CVE-2026-28310: Missing Authorization9.1 CriticalN/A0%Jul 21, 2026
CVE-2026-28309: Missing Authorization9.1 CriticalN/A0%Jul 21, 2026
CVE-2026-28308: Authorization Bypass Through User-Controlled Key9.1 CriticalN/A1%Jul 21, 2026
CVE-2026-28307: Improper Access Control9.1 CriticalN/A0%Jul 21, 2026
CVE-2026-28306: Improper Access Control9.1 CriticalN/A0%Jul 21, 2026
CVE-2026-28302: Authorization Bypass Through User-Controlled Key9.1 CriticalN/A1%Jul 21, 2026
CVE-2026-65049: Incorrect Authorization9.3 Critical8.4 High0%Jul 21, 2026
CVE-2026-65048: Improper Neutralization of Input During Web Page Generation9.3 Critical9.3 Critical1%Jul 21, 2026
CVE-2026-64628: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Jul 21, 2026
CVE-2026-16461: Stack-based Buffer Overflow6.5 MediumN/A0%Jul 21, 2026
CVE-2026-1771: Improper Input Validation7.2 HighN/A1%Jul 21, 2026
CVE-2026-11767: Improper Neutralization of Input During Web Page Generation8.8 HighN/A1%Jul 21, 2026
CVE-2026-15927: Server-Side Request Forgery (SSRF)6.8 MediumN/A1%Jul 21, 2026
CVE-2026-13439: Improper Privilege Management9.8 CriticalN/A1%Jul 21, 2026
CVE-2026-6952: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A2%Jul 21, 2026
CVE-2026-53595: Improper Handling of Case Sensitivity9.4 CriticalN/A2%Jul 20, 2026
CVE-2026-47198: Improper Input Validation8.5 HighN/A0%Jul 20, 2026
CVE-2026-47129: Missing Authorization8.1 HighN/A0%Jul 20, 2026
2326-2350 of 17478