The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-13598: Improper Privilege Management9.8 CriticalN/A0%Aug 23, 2026
CVE-2026-16149: Improper Privilege Management8.8 HighN/A1%Aug 23, 2026
CVE-2026-74620: Undefined Security WeaknessN/AN/A0%Aug 22, 2026
CVE-2026-5093: Missing Authorization4.3 MediumN/A0%Aug 22, 2026
CVE-2026-60083: Incorrect Authorization4.9 Medium6.9 Medium0%Aug 22, 2026
CVE-2026-59808: Missing Authentication for Critical Function8.8 High8.7 High1%Aug 22, 2026
CVE-2026-58003: Cross-Site Request Forgery (CSRF)7.1 High7.1 High0%Aug 22, 2026
CVE-2026-58001: Cross-Site Request Forgery (CSRF)5.7 Medium6.9 Medium0%Aug 22, 2026
CVE-2026-57944: Cross-Site Request Forgery (CSRF)5.4 Medium5.3 Medium0%Aug 22, 2026
CVE-2026-4244: Missing Authorization4.3 MediumN/A0%Aug 22, 2026
CVE-2026-4245: Incorrect Authorization4.3 MediumN/A0%Aug 22, 2026
CVE-2026-78003: Server-Side Request Forgery (SSRF)9.8 CriticalN/A1%Aug 22, 2026
CVE-2026-77002: Improper Authentication9.8 CriticalN/A0%Aug 22, 2026
CVE-2026-77001: Improper Authentication9.8 CriticalN/A0%Aug 22, 2026
CVE-2026-77000: Improper Authentication9.8 CriticalN/A0%Aug 22, 2026
CVE-2026-76793: Improper Authentication8.1 HighN/A0%Aug 22, 2026
CVE-2026-76789: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Aug 22, 2026
CVE-2026-19222: Improper Privilege Management6.6 MediumN/A0%Aug 22, 2026
CVE-2026-19221: Improper Control of Generation of Code7.2 HighN/A0%Aug 22, 2026
CVE-2026-18052: Improper Authentication8.1 HighN/A0%Aug 22, 2026
CVE-2026-16260: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Aug 22, 2026
CVE-2026-19883: Improper Privilege Management8.8 HighN/A0%Aug 22, 2026
CVE-2026-53499: Origin Validation ErrorN/A7.2 High0%Aug 21, 2026
CVE-2026-53529: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Aug 21, 2026
CVE-2026-53527: Improper Privilege Management8.8 HighN/A0%Aug 21, 2026
1426-1450 of 17398