The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-67979: Improper Access Control9.1 CriticalN/A0%Aug 4, 2026
CVE-2026-66902: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A0%Aug 4, 2026
CVE-2026-66901: Server-Side Request Forgery (SSRF)7.5 HighN/A0%Aug 4, 2026
CVE-2026-65986: Improper Neutralization of Input During Web Page GenerationN/A8.5 High0%Aug 4, 2026
CVE-2026-54020: Time-of-check Time-of-use (TOCTOU) Race Condition6.3 MediumN/A0%Aug 4, 2026
CVE-2026-51401: Improper Control of Generation of Code7.7 HighN/A0%Aug 4, 2026
CVE-2026-51400: Missing Release of Memory after Effective Lifetime8.4 HighN/A0%Aug 4, 2026
CVE-2026-45538: Stack-based Buffer Overflow9.8 CriticalN/A0%Aug 4, 2026
CVE-2026-18813: Improper Neutralization of Special Elements used in a Command7.2 High7.3 High2%Aug 4, 2026
CVE-2026-18812: Improper Neutralization of Special Elements used in a Command7.2 High7.3 High4%Aug 4, 2026
CVE-2026-18811: Improper Neutralization of Special Elements used in a Command7.2 High7.3 High4%Aug 4, 2026
CVE-2026-13227: Missing AuthorizationN/A7.1 High0%Aug 4, 2026
CVE-2026-70553: Improper Control of Generation of Code9.8 Critical9.3 Critical1%Aug 4, 2026
CVE-2026-70486: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 4, 2026
CVE-2026-70485: Server-Side Request Forgery (SSRF)7.1 HighN/A0%Aug 4, 2026
CVE-2026-70484: Missing Authorization5.4 MediumN/A0%Aug 4, 2026
CVE-2026-70483: Missing Authorization4.3 MediumN/A0%Aug 4, 2026
CVE-2026-70482: Improper Authentication8.8 HighN/A1%Aug 4, 2026
CVE-2026-70481: Improper Access Control5.4 MediumN/A0%Aug 4, 2026
CVE-2026-70480: Server-Side Request Forgery (SSRF)4.1 MediumN/A0%Aug 4, 2026
CVE-2026-70479: Server-Side Request Forgery (SSRF)7.7 HighN/A0%Aug 4, 2026
CVE-2026-70478: Exposure of Sensitive Information to an Unauthorized Actor10.0 Critical9.2 Critical1%Aug 4, 2026
CVE-2026-70477: Improper Control of Generation of Code9.8 Critical9.5 Critical1%Aug 4, 2026
CVE-2026-70476: Improper Access Control8.2 High8.3 High1%Aug 4, 2026
CVE-2026-70475: Missing Authorization6.5 Medium7.1 High0%Aug 4, 2026
25326-25350 of 400317