The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-91391: Exposure of Sensitive Information to an Unauthorized Actor3.7 LowN/A0%Oct 20, 2026
CVE-2026-91390: Improper Access Control5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91389: Improper Access Control5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91388: Improper Access Control4.7 MediumN/A0%Oct 20, 2026
CVE-2026-91387: Improper Access Control5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91386: Improper Access Control6.8 MediumN/A0%Oct 20, 2026
CVE-2026-91385: Use After Free5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91384: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91383: Improper Access Control6.6 MediumN/A0%Oct 20, 2026
CVE-2026-91382: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91381: Improper Access Control3.7 LowN/A0%Oct 20, 2026
CVE-2026-91380: Improper Access Control4.0 MediumN/A0%Oct 20, 2026
CVE-2026-91379: Use After Free4.7 MediumN/A0%Oct 20, 2026
CVE-2026-91378: Improper Access Control6.1 MediumN/A0%Oct 20, 2026
CVE-2026-91377: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
CVE-2026-91376: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91375: Incorrect Authorization4.7 MediumN/A0%Oct 20, 2026
CVE-2026-91374: Improper Access Control4.8 MediumN/A0%Oct 20, 2026
CVE-2026-91373: Uncontrolled Resource Consumption5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91372: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A0%Oct 20, 2026
CVE-2026-91371: Exposure of Sensitive Information to an Unauthorized Actor5.8 MediumN/A0%Oct 20, 2026
CVE-2026-91370: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91369: Improper Access Control5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91368: Improper Access Control4.1 MediumN/A0%Oct 20, 2026
CVE-2026-91367: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
226-250 of 13404