The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-71320: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.1 HighN/A0%Aug 5, 2026
CVE-2026-71319: Improper Control of Generation of Code9.6 CriticalN/A0%Aug 5, 2026
CVE-2026-71318: Improper Input Validation4.8 MediumN/A0%Aug 5, 2026
CVE-2026-71316: Use of Cache Containing Sensitive Information7.5 HighN/A0%Aug 5, 2026
CVE-2026-67865: Out-of-bounds Read7.5 HighN/A0%Aug 5, 2026
CVE-2026-67864: Uncontrolled Resource Consumption7.5 HighN/A0%Aug 5, 2026
CVE-2025-63823: Use of Hard-coded Credentials9.8 CriticalN/A0%Aug 5, 2026
CVE-2025-63822: Improper Access Control8.1 HighN/A0%Aug 5, 2026
CVE-2026-71315: Improper Handling of Case Sensitivity8.2 HighN/A0%Aug 5, 2026
CVE-2026-71314: Uncontrolled Resource Consumption7.5 HighN/A0%Aug 5, 2026
CVE-2026-71313: Improper Limitation of a Pathname to a Restricted Directory6.9 MediumN/A0%Aug 5, 2026
CVE-2026-71312: Improper Neutralization of Special Elements used in an OS Command8.0 HighN/A0%Aug 5, 2026
CVE-2026-71311: Improper Neutralization of CRLF Sequences6.4 MediumN/A0%Aug 5, 2026
CVE-2026-71310: Uncontrolled Resource Consumption5.9 MediumN/A0%Aug 5, 2026
CVE-2026-71309: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.6 High0%Aug 5, 2026
CVE-2026-34966: Server-Side Request Forgery (SSRF)7.6 High8.3 High0%Aug 5, 2026
CVE-2026-18959: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium2.1 Low1%Aug 5, 2026
CVE-2026-18839: Integer Underflow (Wrap or Wraparound)2.2 LowN/A0%Aug 5, 2026
CVE-2026-18411: Use of Hard-coded Cryptographic Key8.1 High7.2 High0%Aug 5, 2026
CVE-2026-17583: Missing Support for Integrity Check8.4 High8.3 High0%Aug 5, 2026
CVE-2026-15996: Uncontrolled Recursion7.5 High6.6 Medium1%Aug 5, 2026
CVE-2026-70618: Missing Authorization4.3 Medium5.3 Medium0%Aug 5, 2026
CVE-2026-70617: Missing Authorization8.1 High8.6 High0%Aug 5, 2026
CVE-2026-70616: Deadlock6.5 Medium7.1 High0%Aug 5, 2026
CVE-2026-70615: Improper Neutralization of CRLF Sequences9.9 Critical8.5 High0%Aug 5, 2026
24951-24975 of 574060