The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-11361: Insufficient Verification of Data Authenticity5.9 MediumN/A0%Aug 6, 2026
CVE-2026-10599: Insufficient Verification of Data Authenticity7.5 HighN/A0%Aug 6, 2026
CVE-2026-10524: External Control of Assumed-Immutable Web Parameter7.5 HighN/A0%Aug 6, 2026
CVE-2025-6508: Improper Neutralization of Input During Web Page Generation4.3 MediumN/A0%Aug 6, 2026
CVE-2025-15674: Incorrect Authorization2.7 LowN/A0%Aug 6, 2026
CVE-2025-14561: Improper Access Control9.0 CriticalN/A0%Aug 6, 2026
CVE-2025-12317: Insufficient Session Expiration5.0 MediumN/A0%Aug 6, 2026
CVE-2024-6541: Improper Input Validation6.8 MediumN/A0%Aug 6, 2026
CVE-2024-39024: Improper Neutralization of Input During Web Page Generation8.8 HighN/A1%Aug 6, 2026
CVE-2026-3418: Unrestricted Upload of File with Dangerous Type9.1 CriticalN/A1%Aug 6, 2026
CVE-2026-3415: Improper Restriction of Recursive Entity References in DTDs8.7 HighN/A0%Aug 6, 2026
CVE-2026-68750: Inefficient Algorithmic Complexity7.5 High8.2 High1%Aug 6, 2026
CVE-2026-68749: Inefficient Regular Expression Complexity7.5 High8.2 High1%Aug 6, 2026
CVE-2026-68747: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.1 Medium2.3 Low0%Aug 6, 2026
CVE-2026-66843: Inclusion of Functionality from Untrusted Control Sphere6.1 Medium2.3 Low1%Aug 6, 2026
CVE-2026-66829: URL Redirection to Untrusted Site6.1 Medium2.3 Low1%Aug 6, 2026
CVE-2026-66370: URL Redirection to Untrusted Site6.1 Medium4.8 Medium0%Aug 6, 2026
CVE-2026-5423: Authentication Bypass by Assumed-Immutable DataN/A8.2 High1%Aug 6, 2026
CVE-2026-53985: Missing Authentication for Critical Function7.5 High8.7 High1%Aug 6, 2026
CVE-2026-53977: Missing Authentication for Critical Function7.5 High8.7 High1%Aug 6, 2026
CVE-2026-43622: Mismatched Memory Management Routines7.8 High8.5 High0%Aug 6, 2026
CVE-2026-3430: Improper Neutralization of Special Elements used in an SQL Command8.6 HighN/A0%Aug 6, 2026
CVE-2026-19047: Improper Neutralization of Special Elements used in a Command5.3 Medium1.9 Low1%Aug 6, 2026
CVE-2026-19046: Improper Limitation of a Pathname to a Restricted Directory3.3 Low4.8 Medium0%Aug 6, 2026
CVE-2026-18427: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Aug 6, 2026
24676-24700 of 576436