The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-19656: Missing Authorization9.9 CriticalN/A1%Aug 12, 2026
CVE-2026-19643: Out-of-bounds Read5.3 Medium6.0 Medium1%Aug 12, 2026
CVE-2026-19642: Out-of-bounds Write5.9 Medium6.0 Medium1%Aug 12, 2026
CVE-2026-19228: Authorization Bypass Through User-Controlled Key8.5 HighN/A0%Aug 12, 2026
CVE-2026-18679: Improper Certificate ValidationN/A5.8 Medium0%Aug 12, 2026
CVE-2026-18433: Incorrect Authorization4.3 MediumN/A0%Aug 12, 2026
CVE-2026-18150: Concurrent Execution using Shared Resource with Improper Synchronization5.3 MediumN/A0%Aug 12, 2026
CVE-2026-18148: Improper Output Neutralization for Logs4.3 MediumN/A0%Aug 12, 2026
CVE-2026-18099: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 12, 2026
CVE-2026-17642: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 12, 2026
CVE-2026-17445: Execution with Unnecessary Privileges6.5 MediumN/A0%Aug 12, 2026
CVE-2026-17417: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 12, 2026
CVE-2026-17111: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Aug 12, 2026
CVE-2026-17083: Out-of-bounds Write9.8 CriticalN/A1%Aug 12, 2026
CVE-2026-17082: Improper Privilege Management8.8 HighN/A0%Aug 12, 2026
CVE-2026-16494: Missing Authorization7.1 HighN/A0%Aug 12, 2026
CVE-2026-15217: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Aug 12, 2026
CVE-2026-15216: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Aug 12, 2026
CVE-2026-13361: Stack-based Buffer Overflow8.8 HighN/A0%Aug 12, 2026
CVE-2026-13267: Authentication Bypass by Assumed-Immutable Data8.1 HighN/A0%Aug 12, 2026
CVE-2026-12618: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.2 HighN/A1%Aug 12, 2026
CVE-2026-12359: Improper Authentication8.1 HighN/A0%Aug 12, 2026
CVE-2026-12005: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A1%Aug 12, 2026
CVE-2026-12004: Use of Externally-Controlled Format String8.7 HighN/A0%Aug 12, 2026
CVE-2026-11937: Use After Free3.1 LowN/A0%Aug 12, 2026
22101-22125 of 576436