The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-42007: Use After Free9.1 CriticalN/A0%Aug 28, 2026
CVE-2026-40205: Improper Authentication5.9 MediumN/A0%Aug 28, 2026
CVE-2026-40204: Improper Access Control3.1 LowN/A0%Aug 28, 2026
CVE-2026-40203: Exposure of Sensitive Information to an Unauthorized Actor3.7 LowN/A0%Aug 28, 2026
CVE-2026-40019: Uncontrolled Resource Consumption5.9 MediumN/A0%Aug 28, 2026
CVE-2026-40018: Improper Neutralization of Special Elements used in an SQL Command7.4 HighN/A0%Aug 28, 2026
CVE-2026-40017: Uncontrolled Resource Consumption6.5 MediumN/A0%Aug 28, 2026
CVE-2026-40015: Out-of-bounds Read4.3 MediumN/A0%Aug 28, 2026
CVE-2026-40014: Uncontrolled Resource Consumption6.5 MediumN/A0%Aug 28, 2026
CVE-2026-40013: Buffer Underwrite4.3 MediumN/A0%Aug 28, 2026
CVE-2026-33607: Uncontrolled Resource Consumption4.3 MediumN/A0%Aug 28, 2026
CVE-2026-33606: Improper Neutralization of CRLF Sequences4.8 MediumN/A0%Aug 28, 2026
CVE-2026-33605: Uncontrolled Resource Consumption7.5 HighN/A0%Aug 28, 2026
CVE-2026-33604: Insufficient Psychological Acceptability5.9 MediumN/A0%Aug 28, 2026
CVE-2026-33263: Exposure of File Descriptor to Unintended Control Sphere4.3 MediumN/A0%Aug 28, 2026
CVE-2026-27852: Uncontrolled Resource Consumption7.5 HighN/A0%Aug 28, 2026
CVE-2026-18918: Incorrect AuthorizationN/A9.1 Critical0%Aug 28, 2026
CVE-2026-18393: Out-of-bounds Write5.4 MediumN/A0%Aug 28, 2026
CVE-2026-9548: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 28, 2026
CVE-2026-9491: Server-Side Request Forgery (SSRF)4.3 MediumN/A0%Aug 28, 2026
CVE-2026-82123: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 28, 2026
CVE-2026-80724: Undefined Security Weakness8.8 HighN/A0%Aug 28, 2026
CVE-2026-80723: Undefined Security Weakness8.4 HighN/A0%Aug 28, 2026
CVE-2026-80722: Undefined Security Weakness8.8 HighN/A0%Aug 28, 2026
CVE-2026-80721: Undefined Security Weakness8.8 HighN/A0%Aug 28, 2026
12451-12475 of 393417