The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-76341: Incorrect Authorization5.4 MediumN/A0%Aug 19, 2026
CVE-2026-76340: Missing Authorization5.3 MediumN/A0%Aug 19, 2026
CVE-2026-76338: Improper Authentication8.1 HighN/A0%Aug 19, 2026
CVE-2026-76333: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Aug 19, 2026
CVE-2026-76319: Missing Authorization8.8 HighN/A1%Aug 19, 2026
CVE-2026-76318: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 19, 2026
CVE-2026-76317: Path Traversal: '/dir/../filename'8.8 HighN/A1%Aug 19, 2026
CVE-2026-76316: Improper Neutralization of Special Elements in Data Query Logic8.8 HighN/A1%Aug 19, 2026
CVE-2026-76315: Improper Control of Generation of Code8.8 HighN/A1%Aug 19, 2026
CVE-2026-76314: Improper Control of Generation of Code8.8 HighN/A1%Aug 19, 2026
CVE-2026-76313: Improper Access Control8.8 HighN/A1%Aug 19, 2026
CVE-2026-76310: Improper Access Control9.4 CriticalN/A0%Aug 19, 2026
CVE-2026-76263: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Aug 19, 2026
CVE-2026-76262: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Aug 19, 2026
CVE-2026-76260: Incorrect Permission Assignment for Critical Resource6.5 MediumN/A0%Aug 19, 2026
CVE-2026-76258: Use of Hard-coded Cryptographic Key6.5 MediumN/A0%Aug 19, 2026
CVE-2026-76257: Missing Authorization6.5 MediumN/A0%Aug 19, 2026
CVE-2026-76255: Missing Authorization7.3 HighN/A0%Aug 19, 2026
CVE-2026-76254: Improper Neutralization of Special Elements in Data Query Logic8.8 HighN/A0%Aug 19, 2026
CVE-2026-76253: Improper Privilege Management8.8 HighN/A0%Aug 19, 2026
CVE-2026-76251: Missing Authorization7.1 HighN/A0%Aug 19, 2026
CVE-2026-75616: Improper Neutralization of Special Elements used in an OS Command6.8 Medium8.5 High3%Aug 19, 2026
CVE-2026-53547: Missing Authorization8.8 HighN/A1%Aug 19, 2026
CVE-2026-4937: Insufficient Entropy6.0 MediumN/A0%Aug 19, 2026
CVE-2026-18849: Improper Limitation of a Pathname to a Restricted Directory6.8 MediumN/A0%Aug 19, 2026
1526-1550 of 17409