The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-52473: Improper Neutralization of Special Elements used in a Command4.3 MediumN/A0%Aug 26, 2026
CVE-2026-52103: Improper Control of Generation of Code9.8 CriticalN/A1%Aug 26, 2026
CVE-2026-39275: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 26, 2026
CVE-2026-15973: Improper Neutralization of Input During Web Page GenerationN/A8.4 High0%Aug 26, 2026
CVE-2025-61480: Authentication Bypass by Capture-replay7.5 HighN/A0%Aug 26, 2026
CVE-2025-61479: Authentication Bypass by Capture-replay7.5 HighN/A0%Aug 26, 2026
CVE-2025-61478: Uncontrolled Resource Consumption7.5 HighN/A0%Aug 26, 2026
CVE-2025-51679: Sequence of Processor Instructions Leads to Unexpected Behavior9.1 CriticalN/A0%Aug 26, 2026
CVE-2025-51675: Insufficient Control Flow Management7.5 HighN/A0%Aug 26, 2026
CVE-2026-79939: UNIX Symbolic Link (Symlink) Following7.8 HighN/A0%Aug 26, 2026
CVE-2026-79938: Improper Authentication8.8 HighN/A0%Aug 26, 2026
CVE-2026-77652: Heap-based Buffer Overflow7.8 HighN/A0%Aug 26, 2026
CVE-2026-77508: Authentication Bypass by Assumed-Immutable Data3.5 LowN/A0%Aug 26, 2026
CVE-2026-75601: Missing Authentication for Critical Function4.3 MediumN/A0%Aug 26, 2026
CVE-2026-75334: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Aug 26, 2026
CVE-2026-75327: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Aug 26, 2026
CVE-2026-74774: Improper Certificate Validation7.5 HighN/A0%Aug 26, 2026
CVE-2026-74771: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Aug 26, 2026
CVE-2026-74770: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A2%Aug 26, 2026
CVE-2026-71172: Server-Side Request Forgery (SSRF)4.3 MediumN/A0%Aug 26, 2026
CVE-2026-71054: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Aug 26, 2026
CVE-2026-68863: Stack-based Buffer Overflow7.5 HighN/A0%Aug 26, 2026
CVE-2026-68861: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A2%Aug 26, 2026
CVE-2026-68000: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Aug 26, 2026
CVE-2026-67275: Reliance on Insufficiently Trustworthy Component6.5 MediumN/A0%Aug 26, 2026
15201-15225 of 677876