The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-15246: Insufficient Verification of Data Authenticity4.3 MediumN/A0%Aug 6, 2026
CVE-2025-49506: Observable Timing Discrepancy7.5 HighN/A0%Aug 6, 2026
CVE-2026-64993: Improper Certificate Validation9.1 CriticalN/A0%Aug 6, 2026
CVE-2026-5134: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Aug 6, 2026
CVE-2026-19041: Improper Neutralization of Special Elements used in a Command6.3 Medium2.1 Low2%Aug 6, 2026
CVE-2026-19040: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Aug 6, 2026
CVE-2026-18501: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 6, 2026
CVE-2026-16731: Observable Timing DiscrepancyN/A8.3 High0%Aug 6, 2026
CVE-2026-16316: Improper Input Validation4.3 Medium1.3 Low0%Aug 6, 2026
CVE-2026-16315: Observable Timing Discrepancy8.7 High8.1 High0%Aug 6, 2026
CVE-2026-12605: Server-Side Request Forgery (SSRF)9.6 CriticalN/A0%Aug 6, 2026
CVE-2026-70556: Cross-Site Request Forgery (CSRF)4.3 Medium5.1 Medium0%Aug 6, 2026
CVE-2026-66733: Memory Allocation with Excessive Size Value7.5 High8.7 High2%Aug 6, 2026
CVE-2026-66732: Origin Validation Error5.9 Medium8.3 High0%Aug 6, 2026
CVE-2026-65551: Missing Authorization7.5 HighN/A0%Aug 6, 2026
CVE-2026-19039: Improper Neutralization of Special Elements used in a Command5.3 Medium1.9 Low1%Aug 6, 2026
CVE-2026-19038: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 Low0%Aug 6, 2026
CVE-2026-19037: Improper Enforcement of Behavioral Workflow4.3 Medium2.1 Low0%Aug 6, 2026
CVE-2026-19036: Improper Neutralization of Special Elements used in an OS Command7.2 High7.3 High3%Aug 6, 2026
CVE-2026-15599: Unverified Ownership3.3 LowN/A0%Aug 6, 2026
CVE-2026-0673: Improper Neutralization of CRLF Sequences5.3 MediumN/A0%Aug 6, 2026
CVE-2026-8166: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 6, 2026
CVE-2026-68481: Operation on a Resource after Expiration or Release7.5 HighN/A1%Aug 6, 2026
CVE-2026-68079: Authentication Bypass by Capture-replay9.8 CriticalN/A1%Aug 6, 2026
CVE-2026-65583: Insufficient Verification of Data Authenticity9.1 CriticalN/A0%Aug 6, 2026
24801-24825 of 390695