The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-70559: Missing Authentication for Critical Function7.5 High8.7 High0%Aug 6, 2026
CVE-2026-70558: Unrestricted Upload of File with Dangerous Type9.8 Critical9.3 Critical1%Aug 6, 2026
CVE-2026-70557: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Aug 6, 2026
CVE-2026-69125: Undefined Security WeaknessN/AN/AN/AAug 6, 2026
CVE-2026-69124: Undefined Security WeaknessN/AN/AN/AAug 6, 2026
CVE-2026-69123: Undefined Security WeaknessN/AN/AN/AAug 6, 2026
CVE-2026-68948: Undefined Security WeaknessN/AN/AN/AAug 6, 2026
CVE-2026-68947: Undefined Security WeaknessN/AN/AN/AAug 6, 2026
CVE-2026-68946: Undefined Security WeaknessN/AN/AN/AAug 6, 2026
CVE-2026-68944: Undefined Security WeaknessN/AN/AN/AAug 6, 2026
CVE-2026-68943: Undefined Security WeaknessN/AN/AN/AAug 6, 2026
CVE-2026-68942: Undefined Security WeaknessN/AN/AN/AAug 6, 2026
CVE-2026-68941: Undefined Security WeaknessN/AN/AN/AAug 6, 2026
CVE-2026-68480: Undefined Security WeaknessN/AN/A0%Aug 6, 2026
CVE-2026-67689: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A1%Aug 6, 2026
CVE-2026-67688: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Aug 6, 2026
CVE-2026-67687: Improper Access Control8.8 HighN/A1%Aug 6, 2026
CVE-2026-67622: Authorization Bypass Through User-Controlled Key9.9 Critical8.5 High0%Aug 6, 2026
CVE-2026-67621: Missing Authorization7.6 High7.2 High0%Aug 6, 2026
CVE-2026-67434: Improper Neutralization of Special Elements used in an OS CommandN/A7.3 High1%Aug 6, 2026
CVE-2026-67422: Inefficient Regular Expression Complexity7.5 HighN/A1%Aug 6, 2026
CVE-2026-65400: Improper Authentication9.8 CriticalN/A1%Aug 6, 2026
CVE-2026-64677: Improper Limitation of a Pathname to a Restricted DirectoryN/A5.9 Medium1%Aug 6, 2026
CVE-2026-64665: Improper Authentication8.1 HighN/A1%Aug 6, 2026
CVE-2026-64664: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Aug 6, 2026
24551-24575 of 677876