The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-62862: Improper Restriction of Excessive Authentication AttemptsN/A9.1 Critical1%Aug 25, 2026
CVE-2026-62861: Authorization Bypass Through User-Controlled KeyN/A6.4 Medium0%Aug 25, 2026
CVE-2026-38474: Improper Access Control5.4 MediumN/A0%Aug 25, 2026
CVE-2026-38473: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 25, 2026
CVE-2026-38472: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 25, 2026
CVE-2026-38470: Improper Access Control4.3 MediumN/A0%Aug 25, 2026
CVE-2026-38469: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 25, 2026
CVE-2026-38468: Improper Neutralization of Special Elements used in an SQL Command4.3 MediumN/A0%Aug 25, 2026
CVE-2026-38467: Improper Neutralization of Special Elements used in an SQL Command5.4 MediumN/A0%Aug 25, 2026
CVE-2026-38466: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 25, 2026
CVE-2026-38465: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 25, 2026
CVE-2026-32637: Improper Limitation of a Pathname to a Restricted DirectoryN/A5.9 Medium1%Aug 25, 2026
CVE-2026-80104: Improper Limitation of a Pathname to a Restricted Directory9.8 Critical9.3 Critical1%Aug 25, 2026
CVE-2026-80101: Out-of-bounds Read4.4 MediumN/A0%Aug 25, 2026
CVE-2026-79793: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Aug 25, 2026
CVE-2026-79792: Improper Neutralization of Special Elements used in an OS Command5.6 Medium2.9 Low1%Aug 25, 2026
CVE-2026-79293: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Aug 25, 2026
CVE-2026-79292: Integer Overflow or Wraparound8.3 HighN/A0%Aug 25, 2026
CVE-2026-79291: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Aug 25, 2026
CVE-2026-79290: Use After Free9.6 CriticalN/A0%Aug 25, 2026
CVE-2026-79289: Improper Control of a Resource Through its Lifetime3.1 LowN/A0%Aug 25, 2026
CVE-2026-79288: Improper Input Validation6.5 MediumN/A0%Aug 25, 2026
CVE-2026-79287: Observable Discrepancy5.3 MediumN/A0%Aug 25, 2026
CVE-2026-79286: Missing Authorization7.4 HighN/A0%Aug 25, 2026
CVE-2026-79285: Use of Uninitialized Resource6.5 MediumN/A0%Aug 25, 2026
15926-15950 of 703397