The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-81527: Improper Neutralization of Special Elements in Data Query Logic6.5 Medium6.9 Medium0%Aug 27, 2026
CVE-2026-81526: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.5 Medium7.1 High0%Aug 27, 2026
CVE-2026-81525: Improper Neutralization of Special Elements in Data Query Logic8.1 High8.6 High0%Aug 27, 2026
CVE-2026-81524: Improper Control of Resource Identifiers5.4 Medium5.3 Medium0%Aug 27, 2026
CVE-2026-81523: Improper Neutralization of Special Elements in Output Used by a Downstream Component4.4 Medium2.0 Low0%Aug 27, 2026
CVE-2026-81522: Improper Encoding or Escaping of Output8.1 High8.6 High0%Aug 27, 2026
CVE-2026-81521: Improper Control of Resource Identifiers6.5 Medium7.1 High0%Aug 27, 2026
CVE-2026-77438: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Aug 27, 2026
CVE-2026-76640: Out-of-bounds Write7.5 High7.7 High0%Aug 27, 2026
CVE-2026-76639: Improper Limitation of a Pathname to a Restricted Directory8.8 High8.7 High1%Aug 27, 2026
CVE-2026-75889: Files or Directories Accessible to External Parties7.7 HighN/A0%Aug 27, 2026
CVE-2026-74820: Improper Neutralization of Special Elements used in an SQL CommandN/A10.0 Critical0%Aug 27, 2026
CVE-2026-6876: Improper Control of Generation of CodeN/A10.0 Critical0%Aug 27, 2026
CVE-2026-66353: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Aug 27, 2026
CVE-2026-65931: Missing AuthorizationN/A5.1 Medium0%Aug 27, 2026
CVE-2026-59324: Concurrent Execution using Shared Resource with Improper Synchronization8.2 HighN/A0%Aug 27, 2026
CVE-2026-59322: Improper Input Validation6.3 MediumN/A0%Aug 27, 2026
CVE-2026-59321: Concurrent Execution using Shared Resource with Improper Synchronization5.4 MediumN/A0%Aug 27, 2026
CVE-2026-59320: Missing Release of Resource after Effective Lifetime6.5 MediumN/A0%Aug 27, 2026
CVE-2026-59319: Improper Neutralization of Special Elements in Data Query Logic4.3 MediumN/A0%Aug 27, 2026
CVE-2026-59317: Improper Validation of Specified Quantity in Input6.5 MediumN/A0%Aug 27, 2026
CVE-2026-59316: Improper Neutralization of Input During Web Page Generation8.2 HighN/A0%Aug 27, 2026
CVE-2026-59315: Uncontrolled Resource Consumption5.3 MediumN/A0%Aug 27, 2026
CVE-2026-59314: Improper Neutralization of CRLF Sequences in HTTP Headers3.7 LowN/A0%Aug 27, 2026
CVE-2026-59313: Improper Neutralization of CRLF Sequences9.8 CriticalN/A0%Aug 27, 2026
13476-13500 of 544242