The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-16494: Missing Authorization7.1 HighN/A0%Aug 12, 2026
CVE-2026-15217: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Aug 12, 2026
CVE-2026-15216: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Aug 12, 2026
CVE-2026-13361: Stack-based Buffer Overflow8.8 HighN/A0%Aug 12, 2026
CVE-2026-13267: Authentication Bypass by Assumed-Immutable Data8.1 HighN/A0%Aug 12, 2026
CVE-2026-12618: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.2 HighN/A1%Aug 12, 2026
CVE-2026-12359: Improper Authentication8.1 HighN/A0%Aug 12, 2026
CVE-2026-12005: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A1%Aug 12, 2026
CVE-2026-12004: Use of Externally-Controlled Format String8.7 HighN/A0%Aug 12, 2026
CVE-2026-11937: Use After Free3.1 LowN/A0%Aug 12, 2026
CVE-2026-11923: Improper Authentication7.4 HighN/A0%Aug 12, 2026
CVE-2025-9486: Incorrect Privilege Assignment3.3 LowN/A0%Aug 12, 2026
CVE-2026-73301: Missing Authorization4.3 MediumN/A0%Aug 12, 2026
CVE-2026-19311: Undefined Behavior for Input to API8.1 High8.6 High1%Aug 12, 2026
CVE-2026-18952: Server-Side Request Forgery (SSRF)8.1 High8.6 High1%Aug 12, 2026
CVE-2026-18678: Improper Certificate ValidationN/A5.5 Medium0%Aug 12, 2026
CVE-2026-18677: Authentication Bypass by SpoofingN/A6.0 Medium0%Aug 12, 2026
CVE-2026-18676: Origin Validation ErrorN/A5.1 Medium0%Aug 12, 2026
CVE-2026-18675: Uncaught ExceptionN/A5.3 Medium1%Aug 12, 2026
CVE-2026-18673: Exposure of Sensitive Information to an Unauthorized ActorN/A5.3 Medium0%Aug 12, 2026
CVE-2026-8667: Incorrect Authorization4.3 MediumN/A0%Aug 12, 2026
CVE-2026-7427: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Aug 12, 2026
CVE-2026-73327: Undefined Security WeaknessN/A8.7 High1%Aug 12, 2026
CVE-2026-73300: Improper Neutralization of Special Elements used in an SQL Command9.6 CriticalN/A1%Aug 12, 2026
CVE-2026-73299: Improper Control of Generation of Code10.0 CriticalN/A2%Aug 12, 2026
21101-21125 of 395884