The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-81833: Improper Control of Generation of Code5.5 Medium2.0 Low0%Aug 27, 2026
CVE-2026-81731: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Aug 27, 2026
CVE-2026-81730: Improper Limitation of a Pathname to a Restricted Directory8.2 High8.8 High0%Aug 27, 2026
CVE-2026-81729: Incorrect Authorization6.5 Medium7.1 High0%Aug 27, 2026
CVE-2026-81728: Improper Neutralization of Special Elements used in an SQL Command8.1 High8.6 High0%Aug 27, 2026
CVE-2026-81530: Insertion of Sensitive Information into Log File5.6 Medium6.8 Medium0%Aug 27, 2026
CVE-2026-81529: Improper Neutralization of Argument Delimiters in a Command7.1 High7.1 High0%Aug 27, 2026
CVE-2026-81528: Improper Neutralization of Special Elements in Data Query Logic5.4 Medium5.3 Medium0%Aug 27, 2026
CVE-2026-81527: Improper Neutralization of Special Elements in Data Query Logic6.5 Medium6.9 Medium0%Aug 27, 2026
CVE-2026-81526: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.5 Medium7.1 High0%Aug 27, 2026
CVE-2026-81525: Improper Neutralization of Special Elements in Data Query Logic8.1 High8.6 High0%Aug 27, 2026
CVE-2026-81524: Improper Control of Resource Identifiers5.4 Medium5.3 Medium0%Aug 27, 2026
CVE-2026-81523: Improper Neutralization of Special Elements in Output Used by a Downstream Component4.4 Medium2.0 Low0%Aug 27, 2026
CVE-2026-81522: Improper Encoding or Escaping of Output8.1 High8.6 High0%Aug 27, 2026
CVE-2026-81521: Improper Control of Resource Identifiers6.5 Medium7.1 High0%Aug 27, 2026
CVE-2026-77438: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Aug 27, 2026
CVE-2026-76640: Out-of-bounds Write7.5 High7.7 High0%Aug 27, 2026
CVE-2026-76639: Improper Limitation of a Pathname to a Restricted Directory8.8 High8.7 High1%Aug 27, 2026
CVE-2026-75889: Files or Directories Accessible to External Parties7.7 HighN/A0%Aug 27, 2026
CVE-2026-74820: Improper Neutralization of Special Elements used in an SQL CommandN/A10.0 Critical0%Aug 27, 2026
CVE-2026-6876: Improper Control of Generation of CodeN/A10.0 Critical0%Aug 27, 2026
CVE-2026-66353: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Aug 27, 2026
CVE-2026-65931: Missing AuthorizationN/A5.1 Medium0%Aug 27, 2026
CVE-2026-59324: Concurrent Execution using Shared Resource with Improper Synchronization8.2 HighN/A0%Aug 27, 2026
CVE-2026-59322: Improper Input Validation6.3 MediumN/A0%Aug 27, 2026
13026-13050 of 552652