The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-70595: Server-Side Request Forgery (SSRF)4.0 MediumN/A0%Aug 5, 2026
CVE-2026-60053: Insufficient Session Expiration9.1 CriticalN/A0%Aug 5, 2026
CVE-2026-60023: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Aug 5, 2026
CVE-2026-53992: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Aug 5, 2026
CVE-2026-50749: Incorrect Authorization6.5 MediumN/A0%Aug 5, 2026
CVE-2026-49331: Insufficient Verification of Data Authenticity6.5 MediumN/A0%Aug 5, 2026
CVE-2026-48912: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Aug 5, 2026
CVE-2026-48911: Missing Authentication for Critical Function7.5 HighN/A0%Aug 5, 2026
CVE-2026-48834: Uncontrolled Resource Consumption7.5 HighN/A0%Aug 5, 2026
CVE-2026-39924: Insufficient Session Expiration6.8 Medium7.6 High0%Aug 5, 2026
CVE-2026-39923: Use of a Key Past its Expiration Date8.1 High9.2 Critical0%Aug 5, 2026
CVE-2026-32835: Undefined Security WeaknessN/AN/AN/AAug 5, 2026
CVE-2026-18531: Use of Insufficiently Random Values5.3 MediumN/A0%Aug 5, 2026
CVE-2026-15656: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute4.3 MediumN/A0%Aug 5, 2026
CVE-2026-15587: Origin Validation ErrorN/A9.4 Critical0%Aug 5, 2026
CVE-2026-15572: Access of Resource Using Incompatible Type8.8 HighN/A1%Aug 5, 2026
CVE-2026-13477: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Aug 5, 2026
CVE-2026-12762: Insertion of Sensitive Information into Externally-Accessible File or Directory5.3 MediumN/A0%Aug 5, 2026
CVE-2026-12730: Improper Validation of Certificate with Host Mismatch3.8 LowN/A0%Aug 5, 2026
CVE-2026-10025: Improper Restriction of XML External Entity Reference9.8 CriticalN/A1%Aug 5, 2026
CVE-2026-54876: Missing Release of Memory after Effective Lifetime7.5 HighN/A1%Aug 5, 2026
CVE-2026-17613: Missing Authorization7.5 HighN/A0%Aug 5, 2026
CVE-2026-16102: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization8.1 HighN/A0%Aug 5, 2026
CVE-2026-15573: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization8.1 HighN/A0%Aug 5, 2026
CVE-2026-12410: Improper Link Resolution Before File Access7.8 HighN/A0%Aug 5, 2026
25076-25100 of 399626