The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-80235: Unrestricted Upload of File with Dangerous Type9.8 Critical9.3 Critical1%Aug 26, 2026
CVE-2026-80234: Missing Authentication for Critical Function5.3 Medium6.9 Medium1%Aug 26, 2026
CVE-2026-80233: Unrestricted Upload of File with Dangerous Type7.2 High8.6 High1%Aug 26, 2026
CVE-2026-77533: Improper Input Validation9.9 CriticalN/A1%Aug 26, 2026
CVE-2026-19538: Authentication Bypass by Spoofing7.5 High8.2 High0%Aug 26, 2026
CVE-2026-19401: Reachable Assertion7.5 High8.2 High0%Aug 26, 2026
CVE-2026-19197: Missing Authorization6.3 MediumN/A0%Aug 26, 2026
CVE-2026-18916: Integer Underflow (Wrap or Wraparound)7.5 High6.9 Medium0%Aug 26, 2026
CVE-2026-18664: Improper Access Control9.1 Critical8.2 High0%Aug 26, 2026
CVE-2026-9668: Improper Neutralization of Special Elements used in an SQL Command6.3 MediumN/A1%Aug 26, 2026
CVE-2026-78237: Improper Input Validation7.8 HighN/A0%Aug 26, 2026
CVE-2026-78236: Improper Access Control8.8 HighN/A0%Aug 26, 2026
CVE-2026-75977: Improper Privilege Management8.8 HighN/A1%Aug 26, 2026
CVE-2026-6178: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 26, 2026
CVE-2026-18884: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Aug 26, 2026
CVE-2026-58108: Improper Access ControlN/A1.2 Low0%Aug 26, 2026
CVE-2026-3002: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 26, 2026
CVE-2026-18431: Missing Authorization9.8 CriticalN/A1%Aug 26, 2026
CVE-2026-18331: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 26, 2026
CVE-2026-15366: Improper Isolation or CompartmentalizationN/A2.4 Low0%Aug 26, 2026
CVE-2026-15365: Improper Enforcement of Behavioral WorkflowN/A2.4 Low0%Aug 26, 2026
CVE-2026-78146: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Aug 26, 2026
CVE-2026-77790: Improper Neutralization of Special Elements used in an SQL Command5.5 MediumN/A0%Aug 26, 2026
CVE-2026-77789: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Aug 26, 2026
CVE-2026-77758: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Aug 26, 2026
15526-15550 of 764060