The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-75889: Files or Directories Accessible to External Parties7.7 HighN/A0%Aug 27, 2026
CVE-2026-74820: Improper Neutralization of Special Elements used in an SQL CommandN/A10.0 Critical0%Aug 27, 2026
CVE-2026-6876: Improper Control of Generation of CodeN/A10.0 Critical0%Aug 27, 2026
CVE-2026-66353: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Aug 27, 2026
CVE-2026-65931: Missing AuthorizationN/A5.1 Medium0%Aug 27, 2026
CVE-2026-59324: Concurrent Execution using Shared Resource with Improper Synchronization8.2 HighN/A0%Aug 27, 2026
CVE-2026-59322: Improper Input Validation6.3 MediumN/A0%Aug 27, 2026
CVE-2026-59321: Concurrent Execution using Shared Resource with Improper Synchronization5.4 MediumN/A0%Aug 27, 2026
CVE-2026-59320: Missing Release of Resource after Effective Lifetime6.5 MediumN/A0%Aug 27, 2026
CVE-2026-59319: Improper Neutralization of Special Elements in Data Query Logic4.3 MediumN/A0%Aug 27, 2026
CVE-2026-59317: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Aug 27, 2026
CVE-2026-59316: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Aug 27, 2026
CVE-2026-59315: Uncontrolled Resource Consumption5.3 MediumN/A0%Aug 27, 2026
CVE-2026-59314: Improper Neutralization of CRLF Sequences in HTTP Headers3.7 LowN/A0%Aug 27, 2026
CVE-2026-59313: Improper Neutralization of CRLF Sequences9.8 CriticalN/A0%Aug 27, 2026
CVE-2026-59311: Improper Link Resolution Before File Access6.8 MediumN/A0%Aug 27, 2026
CVE-2026-59307: Deserialization of Untrusted Data8.0 HighN/A0%Aug 27, 2026
CVE-2026-59306: Deserialization of Untrusted Data3.8 LowN/A0%Aug 27, 2026
CVE-2026-59305: Incorrect Behavior Order3.8 LowN/A0%Aug 27, 2026
CVE-2026-59304: Access of Resource Using Incompatible Type3.8 LowN/A0%Aug 27, 2026
CVE-2026-59303: Allocation of Resources Without Limits or Throttling3.8 LowN/A0%Aug 27, 2026
CVE-2026-59302: Insertion of Sensitive Information into Log File4.9 MediumN/A0%Aug 27, 2026
CVE-2026-59301: Insertion of Sensitive Information into Log File4.9 MediumN/A0%Aug 27, 2026
CVE-2026-59300: Insertion of Sensitive Information into Log File3.5 LowN/A0%Aug 27, 2026
CVE-2026-59299: Modification of Assumed-Immutable Data (MAID)3.5 LowN/A0%Aug 27, 2026
13226-13250 of 552652