The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-47227: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Aug 12, 2026
CVE-2026-16999: Improper Restriction of XML External Entity Reference6.3 MediumN/A0%Aug 12, 2026
CVE-2026-16747: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.5 MediumN/A0%Aug 12, 2026
CVE-2026-64952: Incorrect Authorization6.5 MediumN/A0%Aug 12, 2026
CVE-2026-19052: Missing Authorization4.3 MediumN/A0%Aug 12, 2026
CVE-2026-18962: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Aug 12, 2026
CVE-2026-18943: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Aug 12, 2026
CVE-2026-18366: Improper Privilege Management9.8 CriticalN/A0%Aug 12, 2026
CVE-2026-18046: Incorrect Authorization4.3 MediumN/A0%Aug 12, 2026
CVE-2026-15388: Incorrect Authorization4.3 MediumN/A0%Aug 12, 2026
CVE-2026-14925: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Aug 12, 2026
CVE-2026-12233: Improper Initialization5.9 MediumN/A1%Aug 12, 2026
CVE-2026-9318: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Aug 12, 2026
CVE-2026-18961: Improper Authentication8.1 HighN/A1%Aug 12, 2026
CVE-2026-66878: Authorization Bypass Through User-Controlled Key7.7 HighN/A0%Aug 12, 2026
CVE-2026-19550: Incorrect Authorization8.2 HighN/A0%Aug 11, 2026
CVE-2026-15606: Missing Authorization8.8 HighN/A1%Aug 11, 2026
CVE-2026-18703: Incorrect Authorization4.2 Medium2.3 Low0%Aug 11, 2026
CVE-2026-15426: Improper Privilege Management8.8 HighN/A1%Aug 11, 2026
CVE-2026-73211: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Aug 11, 2026
CVE-2026-47705: Improper Neutralization of Formula Elements in a CSV File9.6 CriticalN/A1%Aug 11, 2026
CVE-2026-73086: Integer Overflow or Wraparound7.4 HighN/A0%Aug 11, 2026
CVE-2026-71387: Incorrect Authorization8.8 HighN/A1%Aug 11, 2026
CVE-2026-71386: Improper Neutralization of Input During Web Page Generation8.8 HighN/A1%Aug 11, 2026
CVE-2026-71384: Incorrect Authorization9.6 CriticalN/A0%Aug 11, 2026
1801-1825 of 17425
‹›