The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-13154: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Aug 6, 2026
CVE-2026-13153: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Aug 6, 2026
CVE-2026-12713: Improper Neutralization of Special Elements used in an SQL Command9.1 CriticalN/A0%Aug 6, 2026
CVE-2026-11588: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 6, 2026
CVE-2025-15678: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 6, 2026
CVE-2026-19000: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Aug 6, 2026
CVE-2026-18998: Improper Authorization6.3 Medium2.1 Low0%Aug 6, 2026
CVE-2026-18997: Incorrect Authorization6.3 Medium2.1 Low0%Aug 6, 2026
CVE-2026-15459: Improper Authentication8.1 HighN/A1%Aug 6, 2026
CVE-2026-18996: Incorrect Privilege Assignment6.3 Medium2.1 Low0%Aug 6, 2026
CVE-2026-18995: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium2.1 Low0%Aug 6, 2026
CVE-2026-18993: Improper Access Control6.3 Medium2.1 Low0%Aug 6, 2026
CVE-2026-18992: Incorrect Authorization6.3 Medium2.1 Low0%Aug 6, 2026
CVE-2026-18909: Stack-based Buffer Overflow4.7 Medium5.6 Medium0%Aug 6, 2026
CVE-2026-18325: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 6, 2026
CVE-2026-16636: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 6, 2026
CVE-2026-15991: Missing Authorization8.8 HighN/A1%Aug 6, 2026
CVE-2026-18991: Improper Limitation of a Pathname to a Restricted Directory7.3 High5.5 Medium0%Aug 6, 2026
CVE-2026-18990: Missing Authentication for Critical Function7.3 High5.5 Medium0%Aug 6, 2026
CVE-2026-18980: Improper Neutralization of Special Elements used in a Command6.3 Medium2.1 Low1%Aug 6, 2026
CVE-2026-18976: Incorrect Privilege Assignment6.3 Medium2.1 Low0%Aug 6, 2026
CVE-2026-18974: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium5.5 Medium0%Aug 6, 2026
CVE-2026-18973: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Aug 6, 2026
CVE-2026-67873: Heap-based Buffer Overflow9.8 CriticalN/A0%Aug 6, 2026
CVE-2026-67872: Uncontrolled Resource Consumption7.5 HighN/A0%Aug 6, 2026
24901-24925 of 404943