The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-26899: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Aug 27, 2026
CVE-2026-26897: Exposure of Sensitive Information to an Unauthorized Actor9.8 CriticalN/A0%Aug 27, 2026
CVE-2026-26459: Out-of-bounds Write7.5 HighN/A0%Aug 27, 2026
CVE-2026-26457: NULL Pointer Dereference7.5 HighN/A0%Aug 27, 2026
CVE-2026-26456: Concurrent Execution using Shared Resource with Improper Synchronization7.5 HighN/A0%Aug 27, 2026
CVE-2026-26453: NULL Pointer Dereference7.5 HighN/A0%Aug 27, 2026
CVE-2026-26452: Improper Input Validation7.5 HighN/A0%Aug 27, 2026
CVE-2026-19889: Server-Side Request Forgery (SSRF)8.2 HighN/A0%Aug 27, 2026
CVE-2026-19854: Cleartext Transmission of Sensitive Information6.1 MediumN/A0%Aug 27, 2026
CVE-2026-16279: Improper Authorization9.3 CriticalN/A0%Aug 27, 2026
CVE-2026-11754: Observable Discrepancy5.3 MediumN/A0%Aug 27, 2026
CVE-2026-11747: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 27, 2026
CVE-2025-62343: Undefined Security Weakness3.1 LowN/A0%Aug 27, 2026
CVE-2025-62342: Insufficient Session Expiration6.4 MediumN/A0%Aug 27, 2026
CVE-2023-49720: Undefined Security WeaknessN/AN/AN/AAug 27, 2026
CVE-2023-49605: Undefined Security WeaknessN/AN/AN/AAug 27, 2026
CVE-2023-49601: Undefined Security WeaknessN/AN/AN/AAug 27, 2026
CVE-2023-49592: Undefined Security WeaknessN/AN/AN/AAug 27, 2026
CVE-2023-49116: Undefined Security WeaknessN/AN/AN/AAug 27, 2026
CVE-2023-48370: Undefined Security WeaknessN/AN/AN/AAug 27, 2026
CVE-2023-48337: Undefined Security WeaknessN/AN/AN/AAug 27, 2026
CVE-2023-47214: Undefined Security WeaknessN/AN/AN/AAug 27, 2026
CVE-2023-47208: Undefined Security WeaknessN/AN/AN/AAug 27, 2026
CVE-2023-47206: Undefined Security WeaknessN/AN/AN/AAug 27, 2026
CVE-2023-47205: Undefined Security WeaknessN/AN/AN/AAug 27, 2026
13751-13775 of 566702