The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-37006: Improper Authentication9.8 CriticalN/A1%Aug 27, 2026
CVE-2026-37004: Improper Neutralization of Special Elements Used in a Template Engine9.8 CriticalN/A1%Aug 27, 2026
CVE-2026-37003: Improper Control of Generation of Code9.8 CriticalN/A2%Aug 27, 2026
CVE-2026-36102: Improper Privilege Management7.2 HighN/A0%Aug 27, 2026
CVE-2026-35869: Improper Input Validation9.8 CriticalN/A1%Aug 27, 2026
CVE-2026-35868: Improper Input Validation9.8 CriticalN/A1%Aug 27, 2026
CVE-2026-34620: Out-of-bounds Write5.5 MediumN/A0%Aug 27, 2026
CVE-2026-34616: Out-of-bounds Read5.5 MediumN/A0%Aug 27, 2026
CVE-2026-30612: Download of Code Without Integrity Check9.8 CriticalN/A0%Aug 27, 2026
Microsoft Windows: CVE-2026-25250: MITRE: CVE-2026-25250 Secure Boot disable Eazy Fix6.0 MediumN/A0%Aug 27, 2026
CVE-2026-19092: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.8 CriticalN/A1%Aug 27, 2026
CVE-2026-18886: Improper Access ControlN/A10.0 Critical0%Aug 27, 2026
CVE-2026-18885: Improper Control of Generation of CodeN/A10.0 Critical0%Aug 27, 2026
CVE-2026-18374: Out-of-bounds Write4.9 MediumN/A0%Aug 27, 2026
CVE-2026-10036: Deserialization of Untrusted Data8.8 High8.7 High0%Aug 27, 2026
CVE-2026-81827: Improper Input ValidationN/A6.9 Medium0%Aug 27, 2026
CVE-2026-81826: Insufficient Session ExpirationN/A9.1 Critical0%Aug 27, 2026
CVE-2026-81820: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 27, 2026
CVE-2026-81819: Missing AuthorizationN/A5.3 Medium0%Aug 27, 2026
CVE-2026-81818: Improper Privilege ManagementN/A8.6 High0%Aug 27, 2026
CVE-2026-81817: Authorization Bypass Through User-Controlled KeyN/A7.2 High0%Aug 27, 2026
CVE-2026-81735: Missing Authentication for Critical Function10.0 Critical10.0 Critical1%Aug 27, 2026
CVE-2026-81727: Improper Link Resolution Before File Access7.1 High6.9 Medium0%Aug 27, 2026
CVE-2026-81726: External Control of File Name or Path7.0 High8.3 High0%Aug 27, 2026
CVE-2026-81725: Uncontrolled Resource Consumption3.7 Low6.3 Medium0%Aug 27, 2026
13126-13150 of 552652