The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-70623: Undefined Security WeaknessN/AN/AN/AAug 7, 2026
CVE-2026-69207: Inefficient Regular Expression Complexity5.3 MediumN/A1%Aug 7, 2026
CVE-2026-66061: Missing Authorization7.1 HighN/A0%Aug 7, 2026
CVE-2026-66060: Missing Authorization7.1 HighN/A0%Aug 7, 2026
CVE-2026-59717: URL Redirection to Untrusted Site4.3 MediumN/A0%Aug 7, 2026
CVE-2026-54338: Uncontrolled Resource Consumption5.3 MediumN/A0%Aug 7, 2026
CVE-2026-50540: Improper Input Validation9.6 CriticalN/A1%Aug 7, 2026
CVE-2026-47664: Improper Input ValidationN/A8.6 High0%Aug 7, 2026
CVE-2026-47663: Improper AuthorizationN/A8.7 High0%Aug 7, 2026
CVE-2026-47662: Improper Input ValidationN/A8.7 High0%Aug 7, 2026
CVE-2026-46358: Insertion of Sensitive Information into Log FileN/A5.4 Medium0%Aug 7, 2026
CVE-2026-19246: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Aug 7, 2026
CVE-2026-19245: Exposure of Sensitive Information to an Unauthorized Actor3.3 Low1.9 Low0%Aug 7, 2026
CVE-2026-19244: Improper Access Control4.7 Medium2.0 Low0%Aug 7, 2026
CVE-2026-11425: Improper Neutralization of Input During Web Page Generation4.4 Medium2.0 Low0%Aug 7, 2026
CVE-2026-71870: Uncontrolled Resource ConsumptionN/A4.8 Medium0%Aug 7, 2026
CVE-2026-66151: Out-of-bounds Read5.5 MediumN/A0%Aug 7, 2026
CVE-2026-65819: Out-of-bounds Read7.5 HighN/A1%Aug 7, 2026
CVE-2026-62296: Improper Input Validation7.5 HighN/A0%Aug 7, 2026
CVE-2026-62295: Improper Input Validation7.5 HighN/A0%Aug 7, 2026
CVE-2026-62293: Improper Input Validation5.0 MediumN/A0%Aug 7, 2026
CVE-2026-61808: Missing Authentication for Critical Function9.8 CriticalN/A2%Aug 7, 2026
CVE-2026-48039: Improper Authentication9.1 CriticalN/A1%Aug 7, 2026
CVE-2026-48007: Exposure of Sensitive Information to an Unauthorized ActorN/A8.6 High0%Aug 7, 2026
CVE-2026-47661: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.7 High1%Aug 7, 2026
24351-24375 of 764060