The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-0085: Improper Input Validation5.5 MediumN/A0%Jun 1, 2026
CVE-2026-0078: Improper Input Validation7.8 HighN/A0%Jun 1, 2026
CVE-2026-0077: Protection Mechanism Failure7.8 HighN/A0%Jun 1, 2026
CVE-2026-0070: Improper Input Validation5.5 MediumN/A0%Jun 1, 2026
CVE-2026-0069: Uncontrolled Resource Consumption5.5 MediumN/A0%Jun 1, 2026
CVE-2026-0061: Improper Restriction of Rendered UI Layers or Frames5.9 MediumN/A0%Jun 1, 2026
CVE-2026-0060: Undefined Security Weakness5.5 MediumN/A0%Jun 1, 2026
CVE-2026-0055: Improper Limitation of a Pathname to a Restricted Directory6.2 MediumN/A0%Jun 1, 2026
CVE-2026-0050: Improper Privilege Management3.3 LowN/A0%Jun 1, 2026
CVE-2026-0048: Improper Privilege Management6.8 MediumN/A0%Jun 1, 2026
CVE-2026-0046: Improper Privilege Management6.2 MediumN/A0%Jun 1, 2026
CVE-2026-0036: Improper Restriction of Rendered UI Layers or Frames7.8 HighN/A0%Jun 1, 2026
CVE-2026-0018: Improper Input Validation5.5 MediumN/A0%Jun 1, 2026
CVE-2026-0016: Improper Privilege Management3.3 LowN/A0%Jun 1, 2026
CVE-2025-48648: Uncontrolled Resource Consumption5.5 MediumN/A0%Jun 1, 2026
CVE-2025-48616: Undefined Security Weakness3.3 LowN/A0%Jun 1, 2026
CVE-2025-48570: Unintended Proxy or Intermediary7.8 HighN/A0%Jun 1, 2026
CVE-2025-26418: Missing Authorization7.8 HighN/A0%Jun 1, 2026
CVE-2025-22426: Improper Access Control7.8 HighN/A0%Jun 1, 2026
CVE-2026-24751: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Jun 1, 2026
CVE-2026-9309: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 1, 2026
CVE-2026-9308: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jun 1, 2026
CVE-2026-48559: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Jun 1, 2026
CVE-2026-40545: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium1%Jun 1, 2026
CVE-2026-40544: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Jun 1, 2026
2426-2450 of 16397