The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-77542: Improper Input Validation9.1 CriticalN/A1%Aug 26, 2026
CVE-2026-77541: Improper Access Control9.1 CriticalN/A0%Aug 26, 2026
CVE-2026-77540: Improper Input Validation9.1 CriticalN/A1%Aug 26, 2026
CVE-2026-77539: Improper Input Validation9.1 CriticalN/A1%Aug 26, 2026
CVE-2026-77538: Improper Access Control8.2 HighN/A0%Aug 26, 2026
CVE-2026-77537: Improper Input Validation10.0 CriticalN/A2%Aug 26, 2026
CVE-2026-77536: Improper Access Control9.9 CriticalN/A0%Aug 26, 2026
CVE-2026-77535: Improper Input Validation9.1 CriticalN/A1%Aug 26, 2026
CVE-2026-77534: Improper Access Control9.9 CriticalN/A0%Aug 26, 2026
CVE-2026-59683: External Control of File Name or Path9.8 Critical9.3 Critical1%Aug 26, 2026
CVE-2026-59682: External Control of File Name or Path9.1 Critical8.8 High1%Aug 26, 2026
CVE-2026-2388: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 26, 2026
CVE-2026-19042: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A2%Aug 26, 2026
CVE-2026-18794: Improper Validation of Consistency within Input8.2 High8.8 High0%Aug 26, 2026
CVE-2026-16444: External Control of File Name or Path7.5 HighN/A0%Aug 26, 2026
CVE-2026-80237: Unrestricted Upload of File with Dangerous Type8.8 High8.7 High1%Aug 26, 2026
CVE-2026-80236: Improper Neutralization of Special Elements used in an SQL Command8.2 High8.8 High0%Aug 26, 2026
CVE-2026-80235: Unrestricted Upload of File with Dangerous Type9.8 Critical9.3 Critical1%Aug 26, 2026
CVE-2026-80234: Missing Authentication for Critical Function5.3 Medium6.9 Medium1%Aug 26, 2026
CVE-2026-80233: Unrestricted Upload of File with Dangerous Type7.2 High8.6 High1%Aug 26, 2026
CVE-2026-77533: Improper Input Validation9.9 CriticalN/A1%Aug 26, 2026
CVE-2026-19538: Authentication Bypass by Spoofing7.5 High8.2 High0%Aug 26, 2026
CVE-2026-19401: Reachable Assertion7.5 High8.2 High0%Aug 26, 2026
CVE-2026-19197: Missing Authorization6.3 MediumN/A0%Aug 26, 2026
CVE-2026-18916: Integer Underflow (Wrap or Wraparound)7.5 High6.9 Medium0%Aug 26, 2026
15501-15525 of 764060