The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-54553: Exposure of Sensitive Information to an Unauthorized Actor5.4 MediumN/A0%Aug 26, 2026
CVE-2026-79619: Incorrect AuthorizationN/A7.3 High0%Aug 26, 2026
CVE-2026-15985: Authentication Bypass by Alternate Name8.1 HighN/A0%Aug 26, 2026
CVE-2026-80349: Authentication Bypass by Spoofing9.8 Critical9.3 Critical1%Aug 26, 2026
CVE-2026-19197: Missing Authorization6.3 MediumN/A0%Aug 26, 2026
CVE-2026-78236: Improper Access Control8.8 HighN/A0%Aug 26, 2026
CVE-2026-75977: Improper Privilege Management8.8 HighN/A1%Aug 26, 2026
CVE-2026-18431: Missing Authorization9.8 CriticalN/A1%Aug 26, 2026
CVE-2026-18331: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 26, 2026
CVE-2026-75798: Missing Authorization5.3 MediumN/A0%Aug 26, 2026
CVE-2026-75797: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A0%Aug 26, 2026
CVE-2026-19718: Improper Authentication8.1 HighN/A0%Aug 26, 2026
CVE-2026-19220: Improper Privilege Management3.7 LowN/A0%Aug 26, 2026
CVE-2026-14550: Missing Authorization5.3 MediumN/A0%Aug 26, 2026
CVE-2026-80198: Protection Mechanism Failure7.5 High8.7 High0%Aug 26, 2026
CVE-2026-80197: Authorization Bypass Through User-Controlled Key4.3 Medium8.7 High0%Aug 26, 2026
CVE-2026-80192: Improper Authentication8.1 High8.6 High0%Aug 26, 2026
CVE-2026-19632: Weak Password Recovery Mechanism for Forgotten Password9.8 CriticalN/A1%Aug 26, 2026
CVE-2026-63404: Insecure Temporary FileN/A7.3 High0%Aug 25, 2026
CVE-2026-62865: Exposure of Sensitive Information to an Unauthorized ActorN/A8.7 High0%Aug 25, 2026
CVE-2026-26211: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Aug 25, 2026
CVE-2026-75498: Improper Neutralization of Special Elements used in an SQL Command7.2 High8.6 High0%Aug 25, 2026
CVE-2026-75497: Improper Neutralization of Special Elements used in an SQL Command7.2 High8.6 High0%Aug 25, 2026
CVE-2026-75496: Unrestricted Upload of File with Dangerous Type7.2 High8.6 High1%Aug 25, 2026
CVE-2026-55585: Improper Control of Generation of Code8.8 HighN/A0%Aug 25, 2026
1326-1350 of 17396
‹›