The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-23672: Out-of-bounds Read7.8 HighN/A0%Mar 10, 2026
CVE-2026-23671: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A0%Mar 10, 2026
CVE-2026-23669: Use After Free8.8 HighN/A1%Mar 10, 2026
CVE-2026-23668: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A4%Mar 10, 2026
CVE-2026-23667: Use After Free7.0 HighN/A0%Mar 10, 2026
CVE-2026-23660: Improper Access Control7.8 HighN/A0%Mar 10, 2026
CVE-2025-40943: Improper Neutralization of Directives in Dynamically Evaluated Code9.6 Critical9.4 Critical0%Mar 10, 2026
CVE-2026-3818: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Mar 9, 2026
CVE-2026-3787: Uncontrolled Search Path Element7.0 High6.4 Medium0%Mar 8, 2026
CVE-2026-28391: Improper Neutralization of Special Elements used in an OS Command9.8 Critical9.2 Critical0%Mar 5, 2026
CVE-2025-13476: Use of a Broken or Risky Cryptographic Algorithm9.8 CriticalN/A0%Mar 5, 2026
CVE-2025-15558: Uncontrolled Search Path Element8.0 High7.0 High0%Mar 4, 2026
CVE-2026-25673: Uncontrolled Resource Consumption7.5 HighN/A1%Mar 3, 2026
CVE-2026-3000: Download of Code Without Integrity Check9.8 Critical9.3 Critical1%Mar 2, 2026
CVE-2026-2999: Download of Code Without Integrity Check9.8 Critical9.3 Critical1%Mar 2, 2026
CVE-2026-28414: Absolute Path Traversal7.5 HighN/A3%Feb 27, 2026
CVE-2026-1585: Unquoted Search Path or Element6.7 Medium8.4 High0%Feb 27, 2026
CVE-2026-22722: NULL Pointer Dereference6.1 MediumN/A0%Feb 26, 2026
CVE-2026-2636: Improper Handling of Invalid Use of Special Elements5.5 MediumN/A0%Feb 25, 2026
CVE-2025-1789: Incorrect Default Permissions7.8 High5.8 Medium0%Feb 24, 2026
CVE-2025-1787: Origin Validation Error4.2 Medium5.8 Medium0%Feb 24, 2026
CVE-2025-14963: Improper Input Validation7.8 High6.2 Medium0%Feb 24, 2026
CVE-2025-10010: Missing Support for Integrity Check6.8 MediumN/A0%Feb 24, 2026
CVE-2025-40541: Incorrect Type Conversion or Cast9.1 CriticalN/A1%Feb 24, 2026
CVE-2025-40540: Incorrect Type Conversion or Cast9.1 CriticalN/A0%Feb 24, 2026
2451-2475 of 16013