The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-77546: Improper Input Validation9.9 CriticalN/A1%Aug 26, 2026
CVE-2026-77532: Heap-based Buffer Overflow9.6 CriticalN/A0%Aug 26, 2026
CVE-2026-5092: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 26, 2026
CVE-2026-3235: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Aug 26, 2026
CVE-2026-18080: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Aug 26, 2026
CVE-2026-80350: Server-Side Request Forgery (SSRF)7.1 High7.1 High0%Aug 26, 2026
CVE-2026-80349: Authentication Bypass by Spoofing9.8 Critical9.3 Critical1%Aug 26, 2026
CVE-2026-80348: Missing Authorization8.8 High8.7 High1%Aug 26, 2026
CVE-2026-80347: Server-Side Request Forgery (SSRF)7.5 High8.7 High0%Aug 26, 2026
CVE-2026-80346: Missing Authorization7.1 High7.1 High1%Aug 26, 2026
CVE-2026-77545: Active Debug Code9.0 CriticalN/A0%Aug 26, 2026
CVE-2026-77543: Improper Input Validation9.9 CriticalN/A1%Aug 26, 2026
CVE-2026-77542: Improper Input Validation9.1 CriticalN/A1%Aug 26, 2026
CVE-2026-77541: Improper Access Control9.1 CriticalN/A0%Aug 26, 2026
CVE-2026-77540: Improper Input Validation9.1 CriticalN/A1%Aug 26, 2026
CVE-2026-77539: Improper Input Validation9.1 CriticalN/A1%Aug 26, 2026
CVE-2026-77538: Improper Access Control8.2 HighN/A0%Aug 26, 2026
CVE-2026-77537: Improper Input Validation10.0 CriticalN/A2%Aug 26, 2026
CVE-2026-77536: Improper Access Control9.9 CriticalN/A0%Aug 26, 2026
CVE-2026-77535: Improper Input Validation9.1 CriticalN/A1%Aug 26, 2026
CVE-2026-77534: Improper Access Control9.9 CriticalN/A0%Aug 26, 2026
CVE-2026-59683: External Control of File Name or Path9.8 Critical9.3 Critical1%Aug 26, 2026
CVE-2026-59682: External Control of File Name or Path9.1 Critical8.8 High1%Aug 26, 2026
CVE-2026-2388: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 26, 2026
CVE-2026-19042: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A2%Aug 26, 2026
15476-15500 of 764060