The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-72840: Incorrect Privilege Assignment8.8 High8.7 High0%Aug 13, 2026
CVE-2026-72839: Incorrect Privilege Assignment9.8 Critical9.3 Critical0%Aug 13, 2026
CVE-2026-72776: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Aug 13, 2026
CVE-2026-56865: Improper Verification of Cryptographic Signature8.4 HighN/A0%Aug 13, 2026
CVE-2026-56864: Improper Verification of Cryptographic Signature7.5 HighN/A0%Aug 13, 2026
CVE-2026-56862: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Aug 13, 2026
CVE-2026-56860: Inefficient Algorithmic Complexity5.9 MediumN/A0%Aug 13, 2026
CVE-2026-56859: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Aug 13, 2026
CVE-2026-56858: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 13, 2026
CVE-2026-56853: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Aug 13, 2026
CVE-2026-19752: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Aug 13, 2026
CVE-2026-19751: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Aug 13, 2026
CVE-2026-19750: Use of Hard-coded Password8.1 High8.2 High0%Aug 13, 2026
CVE-2026-33818: Uncontrolled Resource ConsumptionN/AN/A0%Aug 13, 2026
CVE-2026-8715: Files or Directories Accessible to External Parties9.6 CriticalN/A0%Aug 13, 2026
CVE-2026-73480: Improper Encoding or Escaping of Output5.0 Medium4.8 Medium0%Aug 13, 2026
CVE-2026-19749: Missing Authentication for Critical Function3.7 Low2.9 Low1%Aug 13, 2026
CVE-2026-19748: Insufficient Entropy3.7 Low2.9 Low0%Aug 13, 2026
CVE-2026-19483: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Aug 13, 2026
CVE-2026-19297: Improper Restriction of Excessive Authentication Attempts9.1 CriticalN/A1%Aug 13, 2026
CVE-2026-18741: Improper Neutralization of Input During Web Page Generation4.8 Medium4.6 Medium0%Aug 13, 2026
CVE-2026-18715: Improper Restriction of XML External Entity Reference6.5 MediumN/A0%Aug 13, 2026
CVE-2026-18671: Integer Overflow or Wraparound5.3 MediumN/A0%Aug 13, 2026
CVE-2026-18511: Out-of-bounds Write7.8 HighN/A0%Aug 13, 2026
CVE-2026-18509: Improper Authorization7.1 HighN/A0%Aug 13, 2026
21276-21300 of 400317