The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-77695: Improper Access Control6.5 MediumN/A0%Aug 26, 2026
CVE-2026-77694: Missing Authorization5.3 MediumN/A0%Aug 26, 2026
CVE-2026-77693: External Control of File Name or Path8.7 HighN/A0%Aug 26, 2026
CVE-2026-75798: Missing Authorization5.3 MediumN/A0%Aug 26, 2026
CVE-2026-75797: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A0%Aug 26, 2026
CVE-2026-74930: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Aug 26, 2026
CVE-2026-74929: Improper Access Control5.4 MediumN/A0%Aug 26, 2026
CVE-2026-74928: Missing Authorization7.5 HighN/A0%Aug 26, 2026
CVE-2026-74851: Improper Control of Generation of Code7.2 HighN/A1%Aug 26, 2026
CVE-2026-58097: Improper Handling of Length Parameter Inconsistency7.8 HighN/A0%Aug 26, 2026
CVE-2026-58096: Improper Handling of Length Parameter Inconsistency8.8 HighN/A1%Aug 26, 2026
CVE-2026-58095: Heap-based Buffer Overflow8.8 HighN/A1%Aug 26, 2026
CVE-2026-58094: Time-of-check Time-of-use (TOCTOU) Race Condition7.8 HighN/A0%Aug 26, 2026
CVE-2026-58093: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A0%Aug 26, 2026
CVE-2026-19760: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 26, 2026
CVE-2026-19718: Improper Authentication8.1 HighN/A0%Aug 26, 2026
CVE-2026-19226: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Aug 26, 2026
CVE-2026-19220: Improper Privilege Management3.7 LowN/A0%Aug 26, 2026
CVE-2026-19094: Improper Neutralization of Special Elements used in an SQL Command5.3 MediumN/A0%Aug 26, 2026
CVE-2026-16986: Improper Access Control5.3 MediumN/A0%Aug 26, 2026
CVE-2026-16984: Improper Access Control6.5 MediumN/A0%Aug 26, 2026
CVE-2026-15203: On-Chip Debug and Test Interface With Improper Access ControlN/A9.3 Critical0%Aug 26, 2026
CVE-2026-14550: Missing Authorization5.3 MediumN/A0%Aug 26, 2026
CVE-2026-14216: Improper Authentication6.5 MediumN/A0%Aug 26, 2026
CVE-2026-14212: Authorization Bypass Through User-Controlled Key4.7 MediumN/A0%Aug 26, 2026
15576-15600 of 764060