The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-70467: Server-Side Request Forgery (SSRF)3.8 LowN/A0%Aug 12, 2026
CVE-2026-57858: Improper Neutralization of Input During Web Page Generation8.9 High9.3 Critical0%Aug 12, 2026
CVE-2026-53996: Missing Authorization7.0 High7.3 High0%Aug 12, 2026
CVE-2026-47226: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Aug 12, 2026
CVE-2026-26035: Improper Authentication9.8 CriticalN/A1%Aug 12, 2026
CVE-2026-70560: Improper Neutralization of Input During Web Page Generation5.4 Medium4.8 Medium0%Aug 12, 2026
CVE-2026-70465: Buffer Copy without Checking Size of Input8.1 HighN/A1%Aug 12, 2026
CVE-2026-70466: Incomplete List of Disallowed Inputs4.8 MediumN/A0%Aug 12, 2026
CVE-2026-18044: Insufficient Verification of Data Authenticity3.7 LowN/A0%Aug 12, 2026
CVE-2026-17008: Undefined Security Weakness5.3 MediumN/A0%Aug 12, 2026
CVE-2026-16990: Undefined Security Weakness5.3 MediumN/A0%Aug 12, 2026
CVE-2026-16747: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.5 MediumN/A0%Aug 12, 2026
CVE-2026-16621: Undefined Security Weakness5.3 MediumN/A0%Aug 12, 2026
CVE-2026-15213: Undefined Security Weakness5.3 MediumN/A0%Aug 12, 2026
CVE-2026-15045: External Control of Assumed-Immutable Web Parameter6.5 MediumN/A0%Aug 12, 2026
CVE-2026-11325: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 12, 2026
CVE-2026-68868: Insufficient Granularity of Access Control6.5 MediumN/A1%Aug 12, 2026
CVE-2026-67284: Improper Access ControlN/A5.3 Medium0%Aug 12, 2026
CVE-2026-64955: Improper Neutralization of Formula Elements in a CSV File6.1 MediumN/A0%Aug 12, 2026
CVE-2026-64952: Incorrect Authorization6.5 MediumN/A0%Aug 12, 2026
CVE-2026-64951: Divide By Zero3.5 LowN/A0%Aug 12, 2026
CVE-2026-18663: Double Free5.9 MediumN/A1%Aug 12, 2026
CVE-2026-18652: Missing Authorization6.5 MediumN/A0%Aug 12, 2026
CVE-2026-67283: Improper Access ControlN/A6.9 Medium0%Aug 12, 2026
CVE-2026-67282: Improper Control of Generation of CodeN/A10.0 Critical1%Aug 12, 2026
22351-22375 of 677876