The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Rapid7

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
CVE-2026-16232:Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild
Blog ↗CVE details
CVE-2026-63030:wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core
Blog ↗CVE details
CVE-2026-58644:Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-15409:Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)
Blog ↗CVE details
CVE-2026-35273:Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)
Blog ↗CVE details
CVE-2026-10520:, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry
Blog ↗CVE details
TitleEitWModules
CVE-2026-66040: FFmpeg: FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and…8.8 High8.7 HighN/AJul 24, 2026
CVE-2026-48029: Out-of-bounds Read7.1 HighN/A0%Jul 22, 2026
CVE-2026-47709: NULL Pointer DereferenceN/A6.9 Medium0%Jul 21, 2026
CVE-2026-47254: Out-of-bounds Read6.1 MediumN/A0%Jul 21, 2026
CVE-2026-47251: Out-of-bounds ReadN/A6.8 Medium0%Jul 21, 2026
CVE-2026-47247: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Jul 21, 2026
CVE-2026-47178: Out-of-bounds Write6.1 MediumN/A0%Jul 21, 2026
CVE-2026-47714: Integer Overflow or Wraparound6.1 MediumN/A0%Jul 21, 2026
CVE-2026-64626: Server-Side Request Forgery (SSRF)6.4 Medium5.3 Medium0%Jul 20, 2026
CVE-2026-63887: Undefined Security Weakness9.8 CriticalN/A1%Jul 19, 2026
CVE-2026-63856: Undefined Security Weakness7.8 HighN/A0%Jul 19, 2026
CVE-2026-63855: Undefined Security Weakness7.8 HighN/A0%Jul 19, 2026
CVE-2026-63854: Undefined Security Weakness7.8 HighN/A0%Jul 19, 2026
CVE-2026-63853: Undefined Security Weakness7.8 HighN/A0%Jul 19, 2026
CVE-2026-63852: Undefined Security Weakness7.8 HighN/A0%Jul 19, 2026
CVE-2026-63851: Undefined Security Weakness7.8 HighN/A0%Jul 19, 2026
CVE-2026-63850: Undefined Security Weakness7.8 HighN/A0%Jul 19, 2026
CVE-2026-63849: Undefined Security Weakness7.8 HighN/A0%Jul 19, 2026
CVE-2026-55173: Improper Neutralization of Special Elements used in an OS Command8.1 HighN/A2%Jul 16, 2026
CVE-2026-61872: Missing Release of Memory after Effective Lifetime2.5 Low2.0 Low0%Jul 15, 2026
CVE-2026-61869: Missing Release of Memory after Effective Lifetime2.9 Low2.1 Low0%Jul 15, 2026
CVE-2026-61867: Missing Release of Memory after Effective Lifetime2.9 Low2.1 Low0%Jul 15, 2026
CVE-2026-61866: Missing Release of Memory after Effective Lifetime7.5 High2.1 Low0%Jul 15, 2026
CVE-2026-61863: Missing Release of Memory after Effective Lifetime7.5 High2.1 Low0%Jul 15, 2026
CVE-2026-48370: Out-of-bounds Write7.8 HighN/A0%Jul 14, 2026
1-25 of 395