The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-20312: Cleartext Storage of Sensitive Information8.8 HighN/A0%Aug 5, 2026
CVE-2026-20311: Buffer Over-read6.3 MediumN/A0%Aug 5, 2026
CVE-2026-20310: Improper Link Resolution Before File Access9.1 CriticalN/A1%Aug 5, 2026
CVE-2026-20308: Improper Privilege Management4.3 MediumN/A0%Aug 5, 2026
CVE-2026-20304: Improper Access Control9.9 CriticalN/A0%Aug 5, 2026
CVE-2026-20303: Improper Input Validation9.9 CriticalN/A0%Aug 5, 2026
CVE-2026-20301: Unchecked Input for Loop Condition8.6 HighN/A1%Aug 5, 2026
CVE-2026-20294: Cleartext Transmission of Sensitive Information6.5 MediumN/A0%Aug 5, 2026
CVE-2026-20289: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Aug 5, 2026
CVE-2026-20288: Improper Neutralization of Expression/Command Delimiters6.5 MediumN/A1%Aug 5, 2026
CVE-2026-20273: Improper Input Validation8.6 HighN/A0%Aug 5, 2026
CVE-2026-20272: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.8 CriticalN/A1%Aug 5, 2026
CVE-2026-20271: Insufficient Control Flow Management8.6 HighN/A0%Aug 5, 2026
CVE-2026-20270: Incorrect Calculation8.6 HighN/A0%Aug 5, 2026
CVE-2026-20269: Improper Control of a Resource Through its Lifetime8.6 HighN/A0%Aug 5, 2026
CVE-2026-20268: Improper Restriction of Operations within the Bounds of a Memory Buffer8.6 HighN/A0%Aug 5, 2026
CVE-2026-20267: Improper Access Control9.0 CriticalN/A0%Aug 5, 2026
CVE-2026-20263: Undefined Security Weakness8.6 HighN/A1%Aug 5, 2026
CVE-2026-20198: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Aug 5, 2026
CVE-2026-20124: Missing Release of Resource after Effective Lifetime7.7 HighN/A1%Aug 5, 2026
CVE-2026-20028: Incorrect Privilege Assignment5.0 MediumN/A0%Aug 5, 2026
CVE-2026-18927: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Aug 5, 2026
CVE-2026-17630: Incomplete List of Disallowed Inputs8.8 HighN/A1%Aug 5, 2026
CVE-2026-17626: Incorrect Privilege Assignment8.8 HighN/A0%Aug 5, 2026
CVE-2026-17623: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 5, 2026
25026-25050 of 398978