The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-47863: Loop with Unreachable Exit Condition7.5 HighN/A0%Aug 27, 2026
CVE-2026-47862: Improper Limitation of a Pathname to a Restricted Directory5.4 MediumN/A0%Aug 27, 2026
CVE-2026-47861: Server-Side Request Forgery (SSRF)6.3 MediumN/A0%Aug 27, 2026
CVE-2026-47860: Undefined Security Weakness6.5 MediumN/A0%Aug 27, 2026
CVE-2026-47859: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Aug 27, 2026
CVE-2026-47857: Integer Overflow or Wraparound5.9 MediumN/A0%Aug 27, 2026
CVE-2026-47856: Deserialization of Untrusted Data6.3 MediumN/A0%Aug 27, 2026
CVE-2026-47852: Insecure Temporary File7.5 HighN/A0%Aug 27, 2026
CVE-2026-47851: Uncontrolled Recursion7.5 HighN/A0%Aug 27, 2026
CVE-2026-47850: Improperly Controlled Modification of Dynamically-Determined Object Attributes4.3 MediumN/A0%Aug 27, 2026
CVE-2026-47845: Authentication Bypass by Spoofing5.3 MediumN/A0%Aug 27, 2026
CVE-2026-81203: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 26, 2026
CVE-2026-80158: Invocation of Process Using Visible Sensitive Information5.5 MediumN/A0%Aug 26, 2026
CVE-2026-75340: Server-Side Request Forgery (SSRF)9.1 CriticalN/A0%Aug 26, 2026
CVE-2026-75338: Improper Access Control9.8 CriticalN/A1%Aug 26, 2026
CVE-2026-75336: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Aug 26, 2026
CVE-2026-75332: Server-Side Request Forgery (SSRF)9.1 CriticalN/A0%Aug 26, 2026
CVE-2026-75330: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Aug 26, 2026
CVE-2026-69129: Authorization Bypass Through User-Controlled KeyN/A5.8 Medium0%Aug 26, 2026
CVE-2026-65956: Missing Authentication for Critical FunctionN/A10.0 Critical1%Aug 26, 2026
CVE-2026-47666: Improper Neutralization of Input During Web Page Generation7.6 HighN/A0%Aug 26, 2026
CVE-2026-47665: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Aug 26, 2026
CVE-2026-21808: Insertion of Sensitive Information into Log File4.1 MediumN/A0%Aug 26, 2026
CVE-2026-21807: Stack-based Buffer Overflow3.9 LowN/A0%Aug 26, 2026
CVE-2026-18823: Undefined Security WeaknessN/AN/AN/AAug 26, 2026
15126-15150 of 677876