The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-70332: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A1%Aug 6, 2026
CVE-2026-62873: Improper Verification of Cryptographic Signature9.8 CriticalN/A1%Aug 6, 2026
CVE-2026-63508: Missing Authentication for Critical Function10.0 CriticalN/A1%Aug 6, 2026
CVE-2026-50515: Deserialization of Untrusted Data9.9 CriticalN/A2%Aug 6, 2026
CVE-2026-56162: Improper Authentication10.0 CriticalN/A1%Aug 6, 2026
CVE-2026-65667: Missing Authorization10.0 CriticalN/A1%Aug 6, 2026
CVE-2026-62830: Missing Authorization9.9 CriticalN/A1%Aug 6, 2026
CVE-2026-56161: Improper Access Control9.6 CriticalN/A1%Aug 6, 2026
CVE-2026-68823: Exposed Dangerous Method or Function9.1 CriticalN/A1%Aug 6, 2026
CVE-2026-49163: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Aug 6, 2026
CVE-2026-59115: Path Traversal: '.../...//'9.9 CriticalN/A1%Aug 6, 2026
CVE-2026-62918: Improper Verification of Cryptographic Signature7.5 HighN/A0%Aug 6, 2026
CVE-2026-50481: Modification of Assumed-Immutable Data (MAID)9.9 CriticalN/A1%Aug 6, 2026
CVE-2026-59118: Improper Authorization9.3 CriticalN/A1%Aug 6, 2026
CVE-2026-65668: Improper Access Control8.8 HighN/A1%Aug 6, 2026
CVE-2026-62896: Improper Authentication9.6 CriticalN/A1%Aug 6, 2026
CVE-2026-62836: Improper Restriction of Communication Channel to Intended Endpoints8.7 HighN/A1%Aug 6, 2026
CVE-2026-8325: Out-of-bounds Write7.8 HighN/A0%Aug 6, 2026
CVE-2026-7867: Incorrect Authorization7.8 HighN/A0%Aug 6, 2026
CVE-2026-7406: Untrusted Pointer Dereference7.8 HighN/A0%Aug 6, 2026
CVE-2026-7405: Out-of-bounds Read5.5 MediumN/A0%Aug 6, 2026
CVE-2026-71555: Use of Web Link to Untrusted Target with window.opener Access4.1 MediumN/A0%Aug 6, 2026
CVE-2026-71554: Inconsistent Interpretation of HTTP Requests5.3 MediumN/A0%Aug 6, 2026
CVE-2026-71498: Out-of-bounds Read5.1 MediumN/A0%Aug 6, 2026
CVE-2026-71497: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Aug 6, 2026
24501-24525 of 677876