The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-68756: Deserialization of Untrusted Data6.6 MediumN/A0%Aug 12, 2026
CVE-2026-68755: Incorrect Authorization4.3 MediumN/A0%Aug 12, 2026
CVE-2026-68754: Missing Authorization6.5 MediumN/A0%Aug 12, 2026
CVE-2026-68753: Missing Authorization5.3 MediumN/A0%Aug 12, 2026
CVE-2026-68752: Improper Privilege Management7.2 HighN/A0%Aug 12, 2026
CVE-2026-67287: Improper Access ControlN/A6.3 Medium0%Aug 12, 2026
CVE-2026-67286: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.3 Medium1%Aug 12, 2026
CVE-2026-66382: Improper Limitation of a Pathname to a Restricted Directory4.3 MediumN/A0%Aug 12, 2026
CVE-2026-66381: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Aug 12, 2026
CVE-2026-66380: Missing Authorization4.3 MediumN/A0%Aug 12, 2026
CVE-2026-66379: Missing Authorization4.3 MediumN/A0%Aug 12, 2026
CVE-2026-66378: Missing Authorization4.3 MediumN/A0%Aug 12, 2026
CVE-2026-66377: Missing Authorization5.3 MediumN/A0%Aug 12, 2026
CVE-2026-66376: Insufficient Session Expiration5.4 MediumN/A0%Aug 12, 2026
CVE-2026-66375: Missing Authorization8.1 HighN/A0%Aug 12, 2026
CVE-2026-50561: Improper Authentication9.4 CriticalN/A1%Aug 12, 2026
CVE-2026-49349: Insufficiently Protected Credentials6.8 MediumN/A0%Aug 12, 2026
CVE-2026-49262: Time-of-check Time-of-use (TOCTOU) Race Condition3.0 LowN/A0%Aug 12, 2026
CVE-2026-47234: Exposure of Sensitive Information to an Unauthorized Actor4.4 MediumN/A0%Aug 12, 2026
CVE-2026-47233: Missing Authorization6.5 MediumN/A0%Aug 12, 2026
CVE-2026-18171: Incorrect AuthorizationN/A5.7 Medium0%Aug 12, 2026
CVE-2026-14479: Improper Validation of Specified Index, Position, or Offset in Input5.5 MediumN/A0%Aug 12, 2026
CVE-2026-14478: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Aug 12, 2026
CVE-2025-59324: Improper Verification of Cryptographic Signature9.1 CriticalN/A0%Aug 12, 2026
CVE-2025-59323: Insufficient Verification of Data Authenticity8.4 HighN/A0%Aug 12, 2026
22301-22325 of 677876