The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-17589: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Sep 1, 2026
CVE-2026-19820: Improper Link Resolution Before File AccessN/A7.8 High0%Sep 1, 2026
CVE-2026-82396: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 31, 2026
CVE-2026-82394: Missing AuthorizationN/A5.3 Medium0%Aug 31, 2026
CVE-2026-75458: Authorization Bypass Through User-Controlled Key8.1 HighN/A0%Aug 31, 2026
CVE-2026-54179: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Aug 31, 2026
CVE-2026-14697: Missing Release of Memory after Effective Lifetime6.5 MediumN/A0%Aug 31, 2026
CVE-2026-14368: Out-of-bounds Write5.4 MediumN/A0%Aug 31, 2026
CVE-2026-82817: Improper Access Control6.3 Medium2.1 Low0%Aug 31, 2026
CVE-2026-51727: Improper Access Control5.3 MediumN/A0%Aug 31, 2026
CVE-2026-77966: Missing Authorization8.8 High8.7 High0%Aug 31, 2026
CVE-2026-73819: Weak Authentication9.8 Critical9.3 Critical1%Aug 31, 2026
CVE-2026-77975: Cleartext Storage of Sensitive Information6.5 Medium7.1 High0%Aug 31, 2026
CVE-2026-59111: Improper Neutralization of Special Elements used in an OS Command9.3 CriticalN/A1%Aug 31, 2026
CVE-2026-51681: Improper Access Control9.1 CriticalN/A1%Aug 31, 2026
CVE-2026-51679: Improper Access Control9.1 CriticalN/A1%Aug 31, 2026
CVE-2026-82678: Improper Neutralization of Special Elements used in an OS Command4.7 Medium2.0 Low2%Aug 31, 2026
CVE-2026-82860: Improper Privilege Management9.8 Critical9.3 Critical0%Aug 31, 2026
CVE-2026-58574: Missing Authentication for Critical Function9.8 CriticalN/A0%Aug 31, 2026
CVE-2026-82621: Authorization Bypass Through User-Controlled Key7.3 High5.5 Medium0%Aug 31, 2026
CVE-2026-77850: Improper Neutralization of Input During Web Page GenerationN/A8.4 High0%Aug 31, 2026
CVE-2026-82651: Exposure of Sensitive Information to an Unauthorized Actor4.9 Medium6.9 Medium0%Aug 30, 2026
CVE-2026-82647: Cross-Site Request Forgery (CSRF)6.1 Medium5.3 Medium0%Aug 30, 2026
CVE-2026-82645: Improper Verification of Cryptographic Signature8.6 High9.2 Critical0%Aug 30, 2026
CVE-2026-78228: Uncontrolled RecursionN/A5.9 Medium0%Aug 30, 2026
1201-1225 of 17396