The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-58097: Improper Handling of Length Parameter Inconsistency7.8 HighN/A0%Aug 26, 2026
CVE-2026-58096: Improper Handling of Length Parameter Inconsistency8.8 HighN/A1%Aug 26, 2026
CVE-2026-58095: Heap-based Buffer Overflow8.8 HighN/A1%Aug 26, 2026
CVE-2026-58094: Time-of-check Time-of-use (TOCTOU) Race Condition7.8 HighN/A0%Aug 26, 2026
CVE-2026-58093: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A0%Aug 26, 2026
CVE-2026-19760: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 26, 2026
CVE-2026-19718: Improper Authentication8.1 HighN/A0%Aug 26, 2026
CVE-2026-19226: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Aug 26, 2026
CVE-2026-19220: Improper Privilege Management3.7 LowN/A0%Aug 26, 2026
CVE-2026-19094: Improper Neutralization of Special Elements used in an SQL Command5.3 MediumN/A0%Aug 26, 2026
CVE-2026-16986: Improper Access Control5.3 MediumN/A0%Aug 26, 2026
CVE-2026-16984: Improper Access Control6.5 MediumN/A0%Aug 26, 2026
CVE-2026-15203: On-Chip Debug and Test Interface With Improper Access ControlN/A9.3 Critical0%Aug 26, 2026
CVE-2026-14550: Missing Authorization5.3 MediumN/A0%Aug 26, 2026
CVE-2026-14216: Improper Authentication6.5 MediumN/A0%Aug 26, 2026
CVE-2026-14212: Authorization Bypass Through User-Controlled Key4.7 MediumN/A0%Aug 26, 2026
CVE-2026-13406: Missing Authorization5.3 MediumN/A0%Aug 26, 2026
CVE-2026-13404: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Aug 26, 2026
CVE-2026-13172: Missing Authorization5.3 MediumN/A0%Aug 26, 2026
CVE-2026-79654: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Aug 26, 2026
CVE-2026-9805: Out-of-bounds Write2.7 LowN/A0%Aug 26, 2026
CVE-2026-9252: Undefined Security WeaknessN/AN/AN/AAug 26, 2026
CVE-2026-9250: Undefined Security WeaknessN/AN/AN/AAug 26, 2026
CVE-2026-9146: Undefined Security WeaknessN/AN/AN/AAug 26, 2026
CVE-2026-80216: Undefined Security WeaknessN/AN/AN/AAug 26, 2026
15801-15825 of 568479