The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-54203: Exposure of Sensitive Information to an Unauthorized ActorN/A9.2 Critical1%Aug 7, 2026
CVE-2026-54202: Absolute Path TraversalN/A8.5 High0%Aug 7, 2026
CVE-2026-54201: Missing AuthorizationN/A6.9 Medium1%Aug 7, 2026
CVE-2026-54200: External Control of File Name or PathN/A8.4 High0%Aug 7, 2026
CVE-2026-54199: Improper Input ValidationN/A5.3 Medium0%Aug 7, 2026
CVE-2026-12071: URL Redirection to Untrusted SiteN/A5.3 Medium0%Aug 7, 2026
CVE-2026-12070: External Control of File Name or PathN/A8.4 High0%Aug 7, 2026
CVE-2026-9169: Uncontrolled Search Path Element8.8 HighN/A0%Aug 7, 2026
CVE-2026-66493: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.4 Medium0%Aug 7, 2026
CVE-2026-66492: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.1 Medium1%Aug 7, 2026
CVE-2026-66491: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.2 High0%Aug 7, 2026
CVE-2026-49008: Use of Hard-coded Cryptographic Key6.5 MediumN/A0%Aug 7, 2026
CVE-2026-18938: Heap-based Buffer Overflow6.2 MediumN/A0%Aug 7, 2026
CVE-2026-49007: Use of Hard-coded Credentials7.5 HighN/A0%Aug 7, 2026
CVE-2026-49006: Use of Hard-coded Cryptographic Key5.3 MediumN/A0%Aug 7, 2026
CVE-2026-19079: Time-of-check Time-of-use (TOCTOU) Race Condition4.4 MediumN/A0%Aug 7, 2026
CVE-2026-16027: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Aug 7, 2026
CVE-2026-15239: Insufficient Verification of Data Authenticity5.3 MediumN/A0%Aug 7, 2026
CVE-2026-15211: Insufficient Verification of Data Authenticity5.9 MediumN/A0%Aug 7, 2026
CVE-2026-15148: Insufficient Verification of Data Authenticity5.3 MediumN/A0%Aug 7, 2026
CVE-2026-12261: Improper Access Control6.5 MediumN/A0%Aug 7, 2026
CVE-2026-19196: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 7, 2026
CVE-2026-16265: Uncontrolled Resource Consumption6.5 MediumN/A0%Aug 7, 2026
CVE-2026-16263: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Aug 7, 2026
CVE-2026-16262: Cross-Site Request Forgery (CSRF)7.5 HighN/A0%Aug 7, 2026
24451-24475 of 677876