The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-91315: Improper Access Control7.8 HighN/A0%Oct 20, 2026
CVE-2026-91314: Improper Access Control7.8 HighN/A0%Oct 20, 2026
CVE-2026-91313: Missing Authentication for Critical Function8.1 HighN/A0%Oct 20, 2026
CVE-2026-91312: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91311: Improper Privilege Management7.8 HighN/A0%Oct 20, 2026
CVE-2026-91310: Missing Authentication for Critical Function8.8 HighN/A0%Oct 20, 2026
CVE-2026-91309: Exposure of Sensitive Information to an Unauthorized Actor5.9 MediumN/A0%Oct 20, 2026
CVE-2026-91308: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
CVE-2026-91307: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
CVE-2026-91306: Improper Privilege Management7.8 HighN/A0%Oct 20, 2026
CVE-2026-91305: Improper Authentication9.1 CriticalN/A0%Oct 20, 2026
CVE-2026-91304: Improper Access Control7.8 HighN/A0%Oct 20, 2026
CVE-2026-91303: Improper Access Control8.8 HighN/A0%Oct 20, 2026
CVE-2026-91302: Improper Resource Shutdown or Release3.3 LowN/A0%Oct 20, 2026
CVE-2026-91301: Improper Access Control3.6 LowN/A0%Oct 20, 2026
CVE-2026-91300: Cross-Site Request Forgery (CSRF)3.1 LowN/A0%Oct 20, 2026
CVE-2026-91299: Improper Access Control10.0 CriticalN/A0%Oct 20, 2026
CVE-2026-91298: Improper Access Control5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91297: Improper Access Control6.1 MediumN/A0%Oct 20, 2026
CVE-2026-91296: URL Redirection to Untrusted Site8.8 HighN/A0%Oct 20, 2026
CVE-2026-91295: Missing Authentication for Critical Function8.8 HighN/A0%Oct 20, 2026
CVE-2026-91294: Uncontrolled Resource Consumption4.3 MediumN/A0%Oct 20, 2026
CVE-2026-91293: Exposure of Sensitive Information to an Unauthorized Actor5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91292: Exposure of Sensitive Information to an Unauthorized Actor5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91291: Improper Access Control3.6 LowN/A0%Oct 20, 2026
301-325 of 13403
‹›