The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-66914: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.2 Critical1%Aug 7, 2026
CVE-2026-61477: Improper Neutralization of CRLF Sequences2.3 LowN/A0%Aug 7, 2026
CVE-2026-37171: Incorrect Authorization5.9 MediumN/A0%Aug 7, 2026
CVE-2026-19206: Heap-based Buffer Overflow5.3 Medium1.9 Low0%Aug 7, 2026
CVE-2026-16637: Insertion of Sensitive Information Into Sent Data6.5 MediumN/A0%Aug 7, 2026
CVE-2026-15570: Server-Side Request Forgery (SSRF)N/A7.1 High0%Aug 7, 2026
CVE-2026-66838: Improper Neutralization of Special Elements used in an SQL Command8.2 High5.9 Medium0%Aug 7, 2026
CVE-2026-66494: Improper Access ControlN/A8.7 High0%Aug 7, 2026
CVE-2026-56794: Relative Path Traversal6.5 MediumN/A0%Aug 7, 2026
CVE-2026-56793: Improper Authentication9.8 CriticalN/A1%Aug 7, 2026
CVE-2026-48094: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium1%Aug 7, 2026
CVE-2026-15816: Improper Neutralization of Special Elements used in an OS Command7.5 HighN/A0%Aug 7, 2026
CVE-2026-71560: Deserialization of Untrusted Data9.1 CriticalN/A1%Aug 7, 2026
CVE-2026-71559: Deserialization of Untrusted Data7.5 HighN/A1%Aug 7, 2026
CVE-2026-71558: Deserialization of Untrusted Data9.8 CriticalN/A1%Aug 7, 2026
CVE-2026-54218: Use of Hard-coded Cryptographic KeyN/A8.8 High0%Aug 7, 2026
CVE-2026-54217: Improper Input ValidationN/A5.3 Medium0%Aug 7, 2026
CVE-2026-54216: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Aug 7, 2026
CVE-2026-54215: URL Redirection to Untrusted SiteN/A5.3 Medium0%Aug 7, 2026
CVE-2026-54214: URL Redirection to Untrusted SiteN/A5.3 Medium0%Aug 7, 2026
CVE-2026-54213: Improper Access ControlN/A9.2 Critical1%Aug 7, 2026
CVE-2026-54212: Out-of-bounds WriteN/A9.5 Critical1%Aug 7, 2026
CVE-2026-54211: Out-of-bounds WriteN/A9.5 Critical1%Aug 7, 2026
CVE-2026-54210: Out-of-bounds WriteN/A9.5 Critical1%Aug 7, 2026
CVE-2026-54209: Out-of-bounds ReadN/A8.9 High0%Aug 7, 2026
24426-24450 of 677876