The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-53620: Authorization Bypass Through User-Controlled Key6.3 Medium5.3 Medium0%Aug 31, 2026
CVE-2026-82621: Authorization Bypass Through User-Controlled Key7.3 High5.5 Medium0%Aug 31, 2026
CVE-2026-82725: Authorization Bypass Through User-Controlled KeyN/A2.3 Low0%Aug 31, 2026
CVE-2026-82724: Incorrect AuthorizationN/A7.6 High0%Aug 31, 2026
CVE-2026-81853: Authorization Bypass Through User-Controlled KeyN/A2.3 Low0%Aug 31, 2026
CVE-2026-75757: Reliance on Cookies without Validation and Integrity CheckingN/A8.3 High0%Aug 31, 2026
CVE-2026-82602: Authorization Bypass Through User-Controlled Key5.3 Medium5.5 Medium0%Aug 31, 2026
CVE-2026-82564: Authorization Bypass Through User-Controlled KeyN/A7.1 High0%Aug 31, 2026
CVE-2026-75760: Generation of Error Message Containing Sensitive InformationN/A7.1 High0%Aug 31, 2026
CVE-2026-82594: Improper Authorization5.0 Medium1.3 Low0%Aug 31, 2026
CVE-2026-81643: Incorrect AuthorizationN/A2.3 Low0%Aug 30, 2026
CVE-2026-80223: Incorrect AuthorizationN/A7.1 High0%Aug 30, 2026
CVE-2026-82553: Improper Authorization6.3 Medium2.1 Low0%Aug 30, 2026
CVE-2026-82658: Improper Authorization4.3 Medium5.3 Medium0%Aug 30, 2026
CVE-2026-82639: Improper Input Validation7.5 High8.7 High1%Aug 30, 2026
CVE-2026-82634: Incorrect Authorization6.5 Medium7.1 High0%Aug 30, 2026
CVE-2026-82633: Missing Authorization4.3 Medium5.3 Medium0%Aug 30, 2026
CVE-2026-81318: Incorrect AuthorizationN/A2.1 Low0%Aug 30, 2026
CVE-2026-81316: Incorrect AuthorizationN/A2.1 Low0%Aug 30, 2026
CVE-2026-78038: Improperly Controlled Modification of Dynamically-Determined Object AttributesN/A5.9 Medium0%Aug 30, 2026
CVE-2026-77454: Incorrect AuthorizationN/A5.9 Medium0%Aug 30, 2026
CVE-2026-15980: Authentication Bypass by Alternate Name9.8 CriticalN/A0%Aug 30, 2026
CVE-2026-82475: Missing Authorization8.1 High8.6 High0%Aug 29, 2026
CVE-2026-82462: Insufficient Verification of Data Authenticity6.5 Medium6.9 Medium0%Aug 29, 2026
CVE-2026-82461: Improper Verification of Cryptographic Signature8.1 High8.6 High0%Aug 29, 2026
2351-2375 of 12127