The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-65927: Off-by-one Error7.5 HighN/A0%Aug 25, 2026
CVE-2026-65905: Authentication Bypass by Capture-replay9.8 CriticalN/A0%Aug 25, 2026
CVE-2026-65637: Improper Input Validation9.8 CriticalN/A0%Aug 25, 2026
CVE-2026-65183: Time-of-check Time-of-use (TOCTOU) Race Condition8.1 HighN/A0%Aug 25, 2026
CVE-2026-65182: Improper Access Control9.1 CriticalN/A0%Aug 25, 2026
CVE-2026-63404: Insecure Temporary FileN/A7.3 High0%Aug 25, 2026
CVE-2026-63403: Uncaught ExceptionN/A8.7 High0%Aug 25, 2026
CVE-2026-62865: Exposure of Sensitive Information to an Unauthorized ActorN/A8.7 High0%Aug 25, 2026
CVE-2026-62862: Improper Restriction of Excessive Authentication AttemptsN/A9.1 Critical1%Aug 25, 2026
CVE-2026-62861: Authorization Bypass Through User-Controlled KeyN/A6.4 Medium0%Aug 25, 2026
CVE-2026-38474: Improper Access Control5.4 MediumN/A0%Aug 25, 2026
CVE-2026-38473: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 25, 2026
CVE-2026-38472: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 25, 2026
CVE-2026-38470: Improper Access Control4.3 MediumN/A0%Aug 25, 2026
CVE-2026-38469: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 25, 2026
CVE-2026-38468: Improper Neutralization of Special Elements used in an SQL Command4.3 MediumN/A0%Aug 25, 2026
CVE-2026-38467: Improper Neutralization of Special Elements used in an SQL Command5.4 MediumN/A0%Aug 25, 2026
CVE-2026-38466: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 25, 2026
CVE-2026-38465: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 25, 2026
CVE-2026-32637: Improper Limitation of a Pathname to a Restricted DirectoryN/A5.9 Medium1%Aug 25, 2026
CVE-2026-80104: Improper Limitation of a Pathname to a Restricted Directory9.8 Critical9.3 Critical1%Aug 25, 2026
CVE-2026-80101: Out-of-bounds Read4.4 MediumN/A0%Aug 25, 2026
CVE-2026-79793: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Aug 25, 2026
CVE-2026-79792: Improper Neutralization of Special Elements used in an OS Command5.6 Medium2.9 Low1%Aug 25, 2026
CVE-2026-79293: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Aug 25, 2026
15776-15800 of 396564