The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-55585: Improper Control of Generation of Code8.8 HighN/A0%Aug 25, 2026
CVE-2026-47624: Protection Mechanism Failure6.0 MediumN/A0%Aug 25, 2026
CVE-2026-24168: Improper Neutralization of Special Elements used in a Command6.8 MediumN/A3%Aug 25, 2026
CVE-2026-24167: Improper Neutralization of Special Elements used in a Command6.8 MediumN/A0%Aug 25, 2026
CVE-2026-55546: Improper Control of Generation of Code9.8 CriticalN/A0%Aug 25, 2026
CVE-2026-77998: Authorization Bypass Through User-Controlled KeyN/A10.0 Critical0%Aug 25, 2026
CVE-2026-63072: Out-of-bounds Write7.5 HighN/A1%Aug 25, 2026
CVE-2026-79666: Missing Authorization6.5 Medium7.1 High0%Aug 25, 2026
CVE-2026-77824: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Aug 25, 2026
CVE-2026-75971: Improper Privilege Management7.2 HighN/A0%Aug 25, 2026
CVE-2026-75908: Missing Authorization4.3 MediumN/A0%Aug 25, 2026
CVE-2026-19949: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A1%Aug 25, 2026
CVE-2026-59335: Improper Handling of Case Sensitivity8.7 HighN/A0%Aug 25, 2026
CVE-2026-12561: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 25, 2026
CVE-2026-19943: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 25, 2026
CVE-2026-19892: Missing Authorization8.8 HighN/A0%Aug 25, 2026
CVE-2026-14280: Improper Control of Filename for Include/Require Statement in PHP Program6.6 MediumN/A1%Aug 25, 2026
CVE-2026-75982: Missing Authorization4.4 MediumN/A0%Aug 25, 2026
CVE-2026-10627: Missing Authorization5.3 MediumN/A0%Aug 25, 2026
CVE-2026-55371: Improper Input ValidationN/A6.9 Medium0%Aug 25, 2026
CVE-2026-78555: Insufficiently Protected CredentialsN/A9.4 Critical0%Aug 24, 2026
CVE-2026-78553: Incorrect Default PermissionsN/A7.0 High0%Aug 24, 2026
CVE-2026-78541: Improper Neutralization of Special Elements used in an OS CommandN/A8.5 High2%Aug 24, 2026
CVE-2026-71504: Missing Authorization8.1 High8.6 High0%Aug 24, 2026
CVE-2026-71503: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Aug 24, 2026
1351-1375 of 17397