The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-81094: Missing Authentication for Critical Function9.1 Critical9.3 Critical1%Aug 27, 2026
CVE-2026-81093: Server-Side Request Forgery (SSRF)8.6 High8.7 High1%Aug 27, 2026
CVE-2026-81092: Origin Validation Error6.8 Medium7.6 High0%Aug 27, 2026
CVE-2026-81091: Server-Side Request Forgery (SSRF)8.6 High8.7 High0%Aug 27, 2026
CVE-2026-80213: Numeric Truncation Error4.0 MediumN/A0%Aug 27, 2026
CVE-2026-80212: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Aug 27, 2026
CVE-2026-79988: Protection Mechanism FailureN/A8.7 High0%Aug 27, 2026
CVE-2026-79720: Improper Neutralization of Input During Web Page Generation5.0 Medium6.8 Medium0%Aug 27, 2026
CVE-2026-79719: Improper Neutralization of Input During Web Page GenerationN/A6.8 Medium0%Aug 27, 2026
CVE-2026-79718: Improper Neutralization of Input During Web Page GenerationN/A6.8 Medium0%Aug 27, 2026
CVE-2026-79653: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.0 Medium0%Aug 27, 2026
CVE-2026-78251: Use of Hard-coded CredentialsN/A9.3 Critical0%Aug 27, 2026
CVE-2026-78002: Incorrect Calculation of Buffer Size7.5 HighN/A1%Aug 27, 2026
CVE-2026-75871: Server-Side Request Forgery (SSRF)9.6 CriticalN/A0%Aug 27, 2026
CVE-2026-75573: Insertion of Sensitive Information into Log File5.5 Medium4.1 Medium0%Aug 27, 2026
CVE-2026-75357: Improper Control of Generation of Code9.8 CriticalN/A1%Aug 27, 2026
CVE-2026-75159: Double Free7.5 High8.2 High0%Aug 27, 2026
CVE-2026-71402: Out-of-bounds Read5.4 Medium5.3 Medium0%Aug 27, 2026
CVE-2026-71401: Integer Underflow (Wrap or Wraparound)N/A5.3 Medium0%Aug 27, 2026
CVE-2026-64896: Improper Access ControlN/A5.2 Medium0%Aug 27, 2026
CVE-2026-5738: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 27, 2026
CVE-2026-5680: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Aug 27, 2026
CVE-2026-59280: Improper Limitation of a Pathname to a Restricted Directory4.3 MediumN/A0%Aug 27, 2026
CVE-2026-59272: Improper Validation of Certificate with Host Mismatch6.8 MediumN/A0%Aug 27, 2026
CVE-2026-57499: Improper Input Validation9.1 CriticalN/A1%Aug 27, 2026
13701-13725 of 566702