The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-100524: Cross-Site Request Forgery (CSRF)5.4 Medium5.3 Medium0%Sep 26, 2026
CVE-2026-100521: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Sep 26, 2026
CVE-2026-88003: Incorrect AuthorizationN/A7.5 High0%Sep 25, 2026
CVE-2026-71483: Improper Neutralization of Input During Web Page GenerationN/A8.5 High0%Sep 25, 2026
CVE-2026-100502: Insufficient Session Expiration5.0 Medium5.9 Medium0%Sep 25, 2026
CVE-2026-100501: Improper Restriction of Excessive Authentication Attempts6.5 Medium8.3 High0%Sep 25, 2026
CVE-2026-100372: Improper Limitation of a Pathname to a Restricted Directory7.2 High8.6 High1%Sep 25, 2026
CVE-2026-97060: Authorization Bypass Through User-Controlled Key7.2 High8.6 High0%Sep 25, 2026
CVE-2026-84458: Improper AuthenticationN/A9.1 Critical0%Sep 25, 2026
CVE-2026-63207: Exposure of Sensitive Information to an Unauthorized ActorN/A6.9 Medium0%Sep 25, 2026
CVE-2026-53628: Improper AuthorizationN/A5.9 Medium0%Sep 25, 2026
CVE-2026-53625: Missing AuthorizationN/A7.5 High1%Sep 25, 2026
CVE-2026-48482: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.4 Critical0%Sep 25, 2026
CVE-2026-93366: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Sep 25, 2026
CVE-2026-84462: Improper Input ValidationN/A8.6 High0%Sep 25, 2026
CVE-2026-56733: Improper Privilege ManagementN/A8.7 High0%Sep 25, 2026
CVE-2026-56726: Missing AuthorizationN/A5.1 Medium0%Sep 25, 2026
CVE-2026-93365: Missing Authorization6.5 Medium7.1 High0%Sep 25, 2026
CVE-2026-93364: Improperly Controlled Modification of Dynamically-Determined Object Attributes4.3 Medium5.3 Medium0%Sep 25, 2026
CVE-2026-67421: Missing Authorization6.8 Medium4.5 Medium0%Sep 25, 2026
CVE-2026-67226: Uncontrolled Resource ConsumptionN/A6.9 Medium0%Sep 25, 2026
CVE-2026-66078: Missing AuthorizationN/A2.1 Low0%Sep 25, 2026
CVE-2026-61837: Improper AuthorizationN/A6.3 Medium0%Sep 25, 2026
CVE-2026-92161: Insufficient Verification of Data Authenticity9.8 CriticalN/A0%Sep 25, 2026
CVE-2026-85293: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Sep 25, 2026
301-325 of 17398
‹›