The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-91340: Improper Access Control8.8 HighN/A0%Oct 20, 2026
CVE-2026-91339: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91338: Improper Access Control7.1 HighN/A0%Oct 20, 2026
CVE-2026-91337: Improper Access Control7.4 HighN/A0%Oct 20, 2026
CVE-2026-91336: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91335: Execution with Unnecessary Privileges2.6 LowN/A0%Oct 20, 2026
CVE-2026-91334: Exposure of Sensitive Information to an Unauthorized Actor3.7 LowN/A0%Oct 20, 2026
CVE-2026-91333: Deserialization of Untrusted Data3.7 LowN/A0%Oct 20, 2026
CVE-2026-91332: Improper Access Control5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91331: Improper Access Control3.8 LowN/A0%Oct 20, 2026
CVE-2026-91330: Improper Resource Shutdown or Release3.3 LowN/A0%Oct 20, 2026
CVE-2026-91329: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91328: URL Redirection to Untrusted Site7.8 HighN/A0%Oct 20, 2026
CVE-2026-91327: Improper Access Control7.5 HighN/A0%Oct 20, 2026
CVE-2026-91326: Improper Access Control8.8 HighN/A0%Oct 20, 2026
CVE-2026-91325: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
CVE-2026-91324: Improper Resource Shutdown or Release4.7 MediumN/A0%Oct 20, 2026
CVE-2026-91323: Improper Authentication9.8 CriticalN/A0%Oct 20, 2026
CVE-2026-91322: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A0%Oct 20, 2026
CVE-2026-91321: Improper Access Control7.5 HighN/A0%Oct 20, 2026
CVE-2026-91320: Improper Access Control5.7 MediumN/A0%Oct 20, 2026
CVE-2026-91319: Improper Access Control5.9 MediumN/A0%Oct 20, 2026
CVE-2026-91318: URL Redirection to Untrusted Site6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91317: Exposure of Sensitive Information to an Unauthorized Actor5.9 MediumN/A0%Oct 20, 2026
CVE-2026-91316: Improper Access Control7.2 HighN/A0%Oct 20, 2026
276-300 of 13403
‹›