The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-28636: Unintended Proxy or Intermediary7.8 HighN/A0%Sep 8, 2026
CVE-2026-28634: Protection Mechanism Failure7.8 HighN/A0%Sep 8, 2026
CVE-2026-28633: Allocation of Resources Without Limits or Throttling5.5 MediumN/A0%Sep 8, 2026
CVE-2026-28631: URL Redirection to Untrusted Site7.8 HighN/A0%Sep 8, 2026
CVE-2026-28626: URL Redirection to Untrusted Site7.3 HighN/A0%Sep 8, 2026
CVE-2026-28623: Missing Authorization3.3 LowN/A0%Sep 8, 2026
CVE-2026-28622: Missing Authorization3.3 LowN/A0%Sep 8, 2026
CVE-2026-28617: Uncontrolled Resource Consumption5.5 MediumN/A0%Sep 8, 2026
CVE-2026-28614: Unintended Proxy or Intermediary7.8 HighN/A0%Sep 8, 2026
CVE-2026-28613: Improper Input Validation7.3 HighN/A0%Sep 8, 2026
CVE-2026-28612: Protection Mechanism Failure7.8 HighN/A0%Sep 8, 2026
CVE-2026-28611: Missing Authorization7.8 HighN/A0%Sep 8, 2026
CVE-2026-28606: Improper Authentication9.8 CriticalN/A0%Sep 8, 2026
CVE-2026-28603: Unintended Proxy or Intermediary7.8 HighN/A0%Sep 8, 2026
CVE-2026-28602: Improper Access Control7.8 HighN/A0%Sep 8, 2026
CVE-2026-28600: Unintended Proxy or Intermediary7.8 HighN/A0%Sep 8, 2026
CVE-2026-28599: Protection Mechanism Failure7.8 HighN/A0%Sep 8, 2026
CVE-2026-28596: Uncontrolled Resource Consumption5.5 MediumN/A0%Sep 8, 2026
CVE-2026-28593: Product UI does not Warn User of Unsafe Actions7.8 HighN/A0%Sep 8, 2026
CVE-2026-28584: Protection Mechanism Failure5.5 MediumN/A0%Sep 8, 2026
CVE-2026-28582: Missing Authorization3.3 LowN/A0%Sep 8, 2026
CVE-2026-0084: Protection Mechanism Failure7.8 HighN/A0%Sep 8, 2026
CVE-2026-0065: Protection Mechanism Failure7.8 HighN/A0%Sep 8, 2026
CVE-2026-81824: Improper Neutralization of Input During Web Page Generation4.7 Medium6.3 Medium0%Sep 8, 2026
CVE-2026-78997: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%Sep 8, 2026
1001-1025 of 16386