The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-7562: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%May 12, 2026
CVE-2026-75624: Incorrect Authorization8.8 HighN/A1%Sep 10, 2026
CVE-2026-75629: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 8, 2026
CVE-2026-75628: URL Redirection to Untrusted Site5.7 MediumN/A1%Aug 20, 2026
CVE-2026-75625: Improper Validation of Integrity Check Value9.0 Critical9.1 Critical0%Aug 18, 2026
CVE-2026-75626: Improper Neutralization of Input During Web Page Generation9.3 Critical9.3 Critical0%Aug 18, 2026
CVE-2026-75627: Authentication Bypass Using an Alternate Path or Channel9.8 Critical9.3 Critical1%Aug 18, 2026