The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-19088: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Aug 13, 2026
CVE-2026-18945: Authorization Bypass Through User-Controlled Key8.2 HighN/A0%Aug 13, 2026
CVE-2026-14213: Authorization Bypass Through User-Controlled Key3.7 LowN/A0%Aug 13, 2026
CVE-2026-14182: Improper Authentication9.8 CriticalN/A0%Aug 13, 2026
CVE-2026-13610: Improper Privilege Management7.5 HighN/A0%Aug 13, 2026
CVE-2026-13328: Improper Access Control5.3 MediumN/A0%Aug 13, 2026
CVE-2026-72506: Incorrectly Specified Destination in a Communication Channel5.4 Medium5.1 Medium0%Aug 13, 2026
CVE-2026-19182: Incorrect Authorization4.3 MediumN/A0%Aug 13, 2026
CVE-2026-19135: Use of Externally-Controlled Input to Select Classes or Code5.4 MediumN/A0%Aug 13, 2026
CVE-2026-18728: Integer Underflow (Wrap or Wraparound)6.5 MediumN/A0%Aug 13, 2026
CVE-2026-0301: Use of Uninitialized Resource7.5 High1.7 Low0%Aug 13, 2026
CVE-2026-0299: Untrusted Search Path7.8 High5.9 Medium0%Aug 13, 2026
CVE-2026-0298: Improper Control of Generation of Code8.1 High5.2 Medium0%Aug 13, 2026
CVE-2026-0297: Out-of-bounds Write8.1 High5.2 Medium0%Aug 13, 2026
CVE-2026-0296: Improper Certificate Validation7.4 High4.5 Medium0%Aug 13, 2026
CVE-2026-0295: Concurrent Execution using Shared Resource with Improper Synchronization7.0 High4.1 Medium0%Aug 13, 2026
CVE-2026-0294: Uncontrolled Search Path Element7.8 High6.0 Medium0%Aug 13, 2026
CVE-2026-0293: Protection Mechanism Failure6.0 Medium5.6 Medium0%Aug 13, 2026
CVE-2026-0292: Authentication Bypass by Spoofing6.0 Medium2.1 Low0%Aug 13, 2026
CVE-2026-0291: Improper Link Resolution Before File Access4.4 Medium1.1 Low0%Aug 13, 2026
CVE-2026-0290: Insufficiently Protected Credentials5.5 Medium0.5 Low0%Aug 13, 2026
CVE-2026-0289: Insufficiently Protected Credentials6.5 Medium0.5 Low0%Aug 13, 2026
CVE-2026-50544: Creation of Temporary File in Directory with Insecure Permissions6.3 MediumN/A0%Aug 13, 2026
CVE-2026-49819: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Aug 13, 2026
CVE-2026-49473: Interpretation Conflict8.8 HighN/A0%Aug 13, 2026
20901-20925 of 566702