The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-68561: Improper Privilege Management8.8 HighN/A1%Aug 19, 2026
CVE-2026-68560: Improper Neutralization of Special Elements used in an OS CommandN/A7.7 High1%Aug 19, 2026
CVE-2026-62317: Inefficient Regular Expression Complexity7.5 HighN/A1%Aug 19, 2026
CVE-2026-55089: Incorrect Authorization9.9 CriticalN/A0%Aug 19, 2026
CVE-2026-55087: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Aug 19, 2026
CVE-2026-55085: Improper Neutralization of Input During Web Page Generation9.6 CriticalN/A0%Aug 19, 2026
CVE-2026-19505: Improper Verification of Cryptographic Signature9.8 CriticalN/A0%Aug 19, 2026
CVE-2026-16724: Integer Overflow or Wraparound4.5 MediumN/A0%Aug 19, 2026
CVE-2026-67189: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium1%Aug 19, 2026
CVE-2026-70496: Execution with Unnecessary Privileges9.9 CriticalN/A1%Aug 19, 2026
CVE-2026-55483: Missing Authorization8.8 High4.9 Medium0%Aug 19, 2026
CVE-2026-49870: Allocation of Resources Without Limits or Throttling5.9 MediumN/A0%Aug 19, 2026
CVE-2026-18848: Cross-Site Request Forgery (CSRF)8.3 HighN/A0%Aug 19, 2026
CVE-2026-18681: Stack-based Buffer Overflow6.8 MediumN/A0%Aug 19, 2026
CVE-2026-18315: Authorization Bypass Through User-Controlled Key9.8 CriticalN/A1%Aug 19, 2026
CVE-2026-16938: Missing Authorization6.9 MediumN/A0%Aug 19, 2026
CVE-2026-16835: Improper Certificate Validation9.6 CriticalN/A0%Aug 19, 2026
CVE-2026-16832: Stack-based Buffer Overflow8.4 HighN/A0%Aug 19, 2026
CVE-2026-19875: Missing Authentication for Critical Function7.5 HighN/A1%Aug 19, 2026
CVE-2025-14600: Authentication Bypass by Primary WeaknessN/A9.3 Critical1%Aug 19, 2026
CVE-2026-48162: External Control of File Name or Path9.1 CriticalN/A1%Aug 19, 2026
CVE-2026-41424: Incorrect Authorization8.2 HighN/A0%Aug 19, 2026
CVE-2026-64852: Missing AuthorizationN/A8.7 High0%Aug 19, 2026
CVE-2026-64851: Improper Neutralization of Input During Web Page GenerationN/A8.5 High0%Aug 19, 2026
CVE-2026-62667: Missing Authorization8.1 HighN/A0%Aug 19, 2026
1551-1575 of 17409