The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
CVE-2026-63520:Microsoft SharePoint Remote Code Execution (FIXED)
Blog ↗CVE details
CVE-2026-55040:Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)
Blog ↗CVE details
CVE-2026-63077:Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)
Blog ↗CVE details
CVE-2026-18577:N-able N-central Authentication Bypass Exploited in the Wild
Blog ↗CVE details
CVE-2026-66066:Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)
Blog ↗CVE details
CVE-2026-66066:KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails
Blog ↗CVE details
TitleEitWModules
CVE-2026-14256: Out-of-bounds Read4.7 Medium5.7 Medium0%Aug 13, 2026
CVE-2026-71331: Integer Overflow or Wraparound8.1 HighN/A0%Aug 11, 2026
CVE-2026-70304: Heap-based Buffer Overflow7.8 HighN/A0%Aug 11, 2026
CVE-2026-66802: Concurrent Execution using Shared Resource with Improper Synchronization8.1 HighN/A0%Aug 11, 2026
CVE-2026-65799: Integer Overflow or Wraparound7.8 HighN/A0%Aug 11, 2026
CVE-2026-65798: Numeric Truncation Error6.7 MediumN/A0%Aug 11, 2026
CVE-2026-65797: Numeric Truncation Error6.7 MediumN/A0%Aug 11, 2026
CVE-2026-65795: Undefined Security Weakness6.7 MediumN/A0%Aug 11, 2026
CVE-2026-65789: Use After Free8.1 HighN/A0%Aug 11, 2026
CVE-2026-65774: Heap-based Buffer Overflow7.8 HighN/A0%Aug 11, 2026
CVE-2026-62812: Improper Link Resolution Before File Access7.8 HighN/A0%Aug 11, 2026
CVE-2026-62807: Improper Link Resolution Before File Access7.8 HighN/A0%Aug 11, 2026
CVE-2026-62776: Improper Link Resolution Before File Access7.8 HighN/A0%Aug 11, 2026
CVE-2026-62768: Stack-based Buffer Overflow7.8 HighN/A0%Aug 11, 2026
CVE-2026-62761: Improper Link Resolution Before File Access7.8 HighN/A0%Aug 11, 2026
CVE-2026-61925: Incorrect Authorization7.8 HighN/A0%Aug 11, 2026
CVE-2026-59127: Integer Overflow or Wraparound7.8 HighN/A0%Aug 11, 2026
CVE-2026-62738: Out-of-bounds Read5.5 MediumN/A0%Aug 11, 2026
CVE-2026-65796: Heap-based Buffer Overflow8.1 HighN/A1%Aug 11, 2026
CVE-2026-65794: Buffer Over-read6.5 MediumN/A1%Aug 11, 2026
CVE-2026-65791: Heap-based Buffer Overflow9.8 CriticalN/A1%Aug 11, 2026
CVE-2026-65790: Heap-based Buffer Overflow7.8 HighN/A0%Aug 11, 2026
CVE-2026-65775: Use After Free7.8 HighN/A2%Aug 11, 2026
CVE-2026-65773: Improper Access Control7.8 HighN/A0%Aug 11, 2026
CVE-2026-65679: Heap-based Buffer Overflow8.1 HighN/A1%Aug 11, 2026
1-25 of 4704