The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-58474: Improper Control of Generation of Code8.8 High8.6 High1%Aug 26, 2026
CVE-2026-54256: Improper Access Control5.4 MediumN/A0%Aug 26, 2026
CVE-2026-47841: Undefined Security Weakness7.4 HighN/A0%Aug 26, 2026
CVE-2026-47837: Missing Authentication for Critical Function9.8 CriticalN/A1%Aug 26, 2026
CVE-2026-47836: Undefined Security Weakness8.1 HighN/A0%Aug 26, 2026
CVE-2026-32639: Authentication Bypass by Alternate Name6.8 MediumN/A0%Aug 26, 2026
CVE-2026-32593: Improper Neutralization of Special Elements used in an SQL Command5.9 MediumN/A0%Aug 26, 2026
CVE-2025-56798: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Aug 26, 2026
CVE-2025-29419: Channel Accessible by Non-Endpoint7.1 HighN/A0%Aug 26, 2026
CVE-2023-42179: Improper Access Control9.8 CriticalN/A0%Aug 26, 2026
CVE-2026-80153: Undefined Security WeaknessN/AN/AN/AAug 26, 2026
CVE-2026-35445: Improper AuthorizationN/A7.1 High0%Aug 26, 2026
CVE-2026-32258: Improper Neutralization of Input During Web Page Generation8.1 HighN/A0%Aug 26, 2026
CVE-2026-32257: Improper Neutralization of Input During Web Page Generation8.1 HighN/A0%Aug 26, 2026
CVE-2020-15878: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Aug 26, 2026
CVE-2020-15876: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Aug 26, 2026
CVE-2020-15874: Improper Neutralization of Special Elements used in a Command8.8 HighN/A1%Aug 26, 2026
CVE-2026-81036: URL Redirection to Untrusted Site8.1 High8.5 High0%Aug 26, 2026
CVE-2026-81035: Missing Authorization8.1 High7.2 High0%Aug 26, 2026
CVE-2026-81034: Improper Certificate Validation6.5 Medium8.3 High0%Aug 26, 2026
CVE-2026-81033: Observable Response Discrepancy5.3 Medium6.9 Medium0%Aug 26, 2026
CVE-2026-81032: Missing Authentication for Critical Function9.8 Critical9.3 Critical0%Aug 26, 2026
CVE-2026-81031: Authorization Bypass Through User-Controlled Key7.2 High8.6 High0%Aug 26, 2026
CVE-2026-81030: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium7.1 High0%Aug 26, 2026
CVE-2026-81029: URL Redirection to Untrusted Site8.1 High8.5 High1%Aug 26, 2026
15276-15300 of 677876