The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-81668: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Aug 27, 2026
CVE-2026-81662: Improper Control of Generation of CodeN/A8.6 High1%Aug 27, 2026
CVE-2026-81659: Improper Limitation of a Pathname to a Restricted DirectoryN/A7.1 High0%Aug 27, 2026
CVE-2026-81658: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Aug 27, 2026
CVE-2026-81562: Improper Neutralization of Special Elements used in an OS Command5.3 Medium1.9 Low1%Aug 27, 2026
CVE-2026-81560: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium5.5 Medium1%Aug 27, 2026
CVE-2026-74233: Use of Hard-coded Cryptographic Key9.8 Critical9.3 Critical3%Aug 27, 2026
CVE-2026-74232: Embedded Malicious Code9.8 Critical9.3 Critical1%Aug 27, 2026
CVE-2026-66155: Improper Neutralization of Input During Web Page Generation7.6 High7.0 High0%Aug 27, 2026
CVE-2026-5218: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)4.3 MediumN/A0%Aug 27, 2026
CVE-2026-17562: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Aug 27, 2026
CVE-2026-81625: Out-of-bounds Write8.8 High8.7 High1%Aug 27, 2026
CVE-2026-81581: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A0%Aug 27, 2026
CVE-2026-81579: Write-what-where Condition8.8 HighN/A0%Aug 27, 2026
CVE-2026-81576: Authorization Bypass Through User-Controlled Key7.7 HighN/A0%Aug 27, 2026
CVE-2026-81575: Improper Handling of Length Parameter Inconsistency7.5 HighN/A0%Aug 27, 2026
CVE-2026-81574: Use of Externally-Controlled Format String8.2 HighN/A0%Aug 27, 2026
CVE-2026-81573: Improper Access Control8.6 HighN/A0%Aug 27, 2026
CVE-2026-81572: Improper Link Resolution Before File Access7.8 HighN/A0%Aug 27, 2026
CVE-2026-81279: Missing Authorization5.4 MediumN/A0%Aug 27, 2026
CVE-2026-81277: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Aug 27, 2026
CVE-2026-81276: Missing Authorization5.3 MediumN/A0%Aug 27, 2026
CVE-2026-81274: Missing Authorization5.3 MediumN/A0%Aug 27, 2026
CVE-2026-81273: Cross-Site Request Forgery (CSRF)8.1 HighN/A0%Aug 27, 2026
CVE-2026-81272: Missing Authorization4.9 MediumN/A0%Aug 27, 2026
13951-13975 of 398276