The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-9266: Missing Authorization4.3 MediumN/A0%Aug 6, 2026
CVE-2025-15028: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 6, 2026
CVE-2026-66909: Deserialization of Untrusted Data9.8 CriticalN/A1%Aug 6, 2026
CVE-2026-65432: Improper Restriction of XML External Entity Reference7.5 HighN/A1%Aug 6, 2026
CVE-2026-64958: Uncontrolled Resource Consumption7.5 HighN/A1%Aug 6, 2026
CVE-2026-57819: Uncontrolled Resource Consumption7.5 HighN/A1%Aug 6, 2026
CVE-2026-57817: Improper Input Validation8.1 HighN/A1%Aug 6, 2026
CVE-2026-54225: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Aug 6, 2026
CVE-2026-19034: Improper Neutralization of Special Elements used in an OS Command7.2 High7.3 High3%Aug 6, 2026
CVE-2026-55980: Stack-based Buffer Overflow5.5 MediumN/A0%Aug 6, 2026
CVE-2026-55979: Improper Access Control5.2 MediumN/A0%Aug 6, 2026
CVE-2026-55978: Improper Access Control8.4 HighN/A0%Aug 6, 2026
CVE-2026-64640: Incorrect Authorization6.5 Medium5.3 Medium0%Aug 6, 2026
CVE-2026-19022: Improper Neutralization of Special Elements used in a Command6.3 Medium5.3 Medium2%Aug 6, 2026
CVE-2026-64604: Undefined Security WeaknessN/AN/A0%Aug 6, 2026
CVE-2026-64603: Undefined Security WeaknessN/AN/A0%Aug 6, 2026
CVE-2026-64602: Undefined Security WeaknessN/AN/A0%Aug 6, 2026
CVE-2026-64601: Undefined Security Weakness7.8 HighN/A0%Aug 6, 2026
CVE-2026-64599: Undefined Security Weakness7.8 HighN/A0%Aug 6, 2026
CVE-2026-64598: Undefined Security Weakness8.8 HighN/A1%Aug 6, 2026
CVE-2026-64597: Undefined Security Weakness9.8 CriticalN/A1%Aug 6, 2026
CVE-2026-64596: Undefined Security WeaknessN/AN/A0%Aug 6, 2026
CVE-2026-64595: Undefined Security WeaknessN/AN/A0%Aug 6, 2026
CVE-2026-64594: Undefined Security WeaknessN/AN/A0%Aug 6, 2026
CVE-2026-64593: Undefined Security WeaknessN/AN/A0%Aug 6, 2026
24826-24850 of 390695