The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-20337: Buffer Copy without Checking Size of Input7.5 HighN/A1%Aug 7, 2026
CVE-2026-19212: Use of Uninitialized Variable4.3 Medium2.1 Low0%Aug 7, 2026
CVE-2026-19211: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 7, 2026
CVE-2026-17603: Improper Control of Generation of Code8.8 High8.7 High0%Aug 7, 2026
CVE-2026-17601: Missing Authorization7.2 High8.9 High0%Aug 7, 2026
CVE-2026-17600: Insufficient Session Expiration8.8 High8.7 High0%Aug 7, 2026
CVE-2026-17599: Unverified Password Change7.2 High6.9 Medium0%Aug 7, 2026
CVE-2026-17598: Improperly Controlled Modification of Dynamically-Determined Object Attributes4.9 Medium5.3 Medium0%Aug 7, 2026
CVE-2026-17597: Server-Side Request Forgery (SSRF)2.7 Low5.1 Medium0%Aug 7, 2026
CVE-2026-17596: Improper Neutralization of Input During Web Page Generation6.1 Medium6.3 Medium0%Aug 7, 2026
CVE-2026-17595: Exposure of Sensitive System Information to an Unauthorized Control Sphere2.7 Low5.3 Medium0%Aug 7, 2026
CVE-2026-17594: Incorrect Authorization4.9 Medium8.2 High1%Aug 7, 2026
CVE-2026-17593: Use of Externally-Controlled Input to Select Classes or Code7.2 High7.2 High1%Aug 7, 2026
CVE-2026-14644: Access of Resource Using Incompatible Type7.2 High8.6 High0%Aug 7, 2026
CVE-2026-68772: Deserialization of Untrusted Data8.0 High8.5 High1%Aug 7, 2026
CVE-2026-66059: Incorrect AuthorizationN/A5.3 Medium0%Aug 7, 2026
CVE-2026-62996: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.9 Medium1%Aug 7, 2026
CVE-2026-62992: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.9 Medium1%Aug 7, 2026
CVE-2026-48093: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 7, 2026
CVE-2026-19210: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Aug 7, 2026
CVE-2026-19209: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Aug 7, 2026
CVE-2026-19208: Improper Enforcement of Behavioral Workflow3.7 Low2.9 Low0%Aug 7, 2026
CVE-2026-19264: Improper Limitation of a Pathname to a Restricted Directory9.8 Critical9.3 Critical1%Aug 7, 2026
CVE-2026-19207: Improper Neutralization of Input During Web Page Generation2.4 Low1.9 Low0%Aug 7, 2026
CVE-2026-18497: Heap-based Buffer Overflow7.1 HighN/A0%Aug 7, 2026
24401-24425 of 677876