The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-51624: Improper Access Control7.5 HighN/A0%Aug 28, 2026
CVE-2026-51623: Improper Access Control7.5 HighN/A0%Aug 28, 2026
CVE-2026-51622: Improper Access Control9.1 CriticalN/A0%Aug 28, 2026
CVE-2026-51621: Improper Access Control7.5 HighN/A0%Aug 28, 2026
CVE-2026-51620: Improper Access Control7.5 HighN/A0%Aug 28, 2026
CVE-2026-51619: Improper Access Control7.5 HighN/A0%Aug 28, 2026
CVE-2026-51618: Improper Access Control7.5 HighN/A0%Aug 28, 2026
CVE-2026-51617: Improper Access Control7.5 HighN/A0%Aug 28, 2026
CVE-2026-51616: Improper Access Control7.5 HighN/A0%Aug 28, 2026
CVE-2026-51615: Improper Access Control7.5 HighN/A0%Aug 28, 2026
CVE-2026-51614: Improper Access Control4.3 MediumN/A0%Aug 28, 2026
CVE-2026-51613: Improper Access Control4.3 MediumN/A0%Aug 28, 2026
CVE-2026-51611: Improper Access Control9.8 CriticalN/A0%Aug 28, 2026
CVE-2026-51610: Improper Access Control4.3 MediumN/A0%Aug 28, 2026
CVE-2026-51376: Inconsistent Interpretation of HTTP Requests6.5 MediumN/A0%Aug 28, 2026
CVE-2026-50980: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 28, 2026
CVE-2026-39071: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 28, 2026
CVE-2026-39070: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Aug 28, 2026
CVE-2026-82330: Out-of-bounds Read6.1 MediumN/A0%Aug 28, 2026
CVE-2026-82328: Out-of-bounds Read6.1 MediumN/A0%Aug 28, 2026
CVE-2026-82327: Improper Validation of Array Index5.5 MediumN/A0%Aug 28, 2026
CVE-2026-82324: Out-of-bounds Read6.1 MediumN/A0%Aug 28, 2026
CVE-2026-82227: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Aug 28, 2026
CVE-2026-82220: Authentication Bypass by Capture-replay5.3 MediumN/A0%Aug 28, 2026
CVE-2026-82181: Use of GET Request Method With Sensitive Query Strings5.5 Medium6.8 Medium0%Aug 28, 2026
12201-12225 of 673429