The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-12710: Missing AuthorizationN/A9.3 Critical0%Aug 22, 2026
CVE-2026-76074: Missing Authorization4.3 MediumN/A0%Aug 22, 2026
CVE-2026-76057: Missing Authorization4.3 MediumN/A0%Aug 22, 2026
CVE-2026-75027: Missing Authorization5.3 MediumN/A0%Aug 22, 2026
CVE-2026-76876: Missing Authorization5.9 Medium8.2 High0%Aug 21, 2026
CVE-2026-77795: Improper Authorization6.3 Medium5.3 Medium0%Aug 21, 2026
CVE-2026-63004: Server-Side Request Forgery (SSRF)5.5 MediumN/A0%Aug 21, 2026
CVE-2026-71862: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Aug 21, 2026
CVE-2026-54789: Out-of-bounds Read7.5 HighN/A0%Aug 21, 2026
CVE-2026-55622: Improper Access Control7.7 HighN/A0%Aug 21, 2026
CVE-2026-55621: Improper Access Control7.7 HighN/A0%Aug 21, 2026
CVE-2026-77780: Authorization Bypass Through User-Controlled KeyN/A5.3 Medium0%Aug 21, 2026
CVE-2026-77775: Server-Side Request Forgery (SSRF)8.6 High7.7 High0%Aug 21, 2026
CVE-2026-77759: Authorization Bypass Through User-Controlled KeyN/A8.7 High0%Aug 21, 2026
CVE-2026-77767: Missing Authorization7.5 High8.7 High0%Aug 21, 2026
CVE-2026-77686: Improper Authorization5.4 Medium2.1 Low0%Aug 21, 2026
CVE-2026-66722: Improper Authorization7.2 HighN/A0%Aug 21, 2026
CVE-2026-66721: Missing Authorization2.7 LowN/A0%Aug 21, 2026
CVE-2026-50222: Missing Authorization7.5 HighN/A0%Aug 21, 2026
CVE-2026-65645: Improper Input Validation4.3 MediumN/A0%Aug 21, 2026
CVE-2026-72860: Server-Side Request Forgery (SSRF)8.5 High6.3 Medium0%Aug 20, 2026
CVE-2026-50192: Exposure of Sensitive Information to an Unauthorized ActorN/A6.9 Medium0%Aug 20, 2026
CVE-2026-49217: Missing Authentication for Critical Function7.5 HighN/A0%Aug 20, 2026
CVE-2026-69558: Authorization Bypass Through User-Controlled Key8.6 HighN/A1%Aug 20, 2026
CVE-2026-69555: Incorrect Authorization10.0 CriticalN/A0%Aug 20, 2026
2601-2625 of 12143