The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-96375: Improper Certificate Validation4.8 MediumN/A0%Oct 22, 2026
CVE-2026-96374: Cross-Site Request Forgery (CSRF)4.2 MediumN/A0%Oct 22, 2026
CVE-2026-96373: Incorrect Authorization3.3 LowN/A0%Oct 22, 2026
CVE-2026-96372: Insufficient Granularity of Access Control5.4 MediumN/A0%Oct 22, 2026
CVE-2026-96371: Privilege Defined With Unsafe Actions5.4 MediumN/A0%Oct 22, 2026
CVE-2026-96370: Incorrect Authorization5.4 MediumN/A0%Oct 22, 2026
CVE-2026-96369: Use of Web Browser Cache Containing Sensitive Information3.1 LowN/A0%Oct 22, 2026
CVE-2026-96368: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 22, 2026
CVE-2026-96367: Privilege Defined With Unsafe Actions4.6 MediumN/A0%Oct 22, 2026
CVE-2026-96366: Incorrect Authorization5.3 MediumN/A0%Oct 22, 2026
CVE-2026-96365: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Oct 22, 2026
CVE-2026-96364: Improper Control of Interaction Frequency5.3 MediumN/A0%Oct 22, 2026
CVE-2026-96363: Privilege Defined With Unsafe ActionsN/AN/A0%Oct 22, 2026
CVE-2026-96362: Improper Neutralization of Input During Web Page Generation4.2 MediumN/A0%Oct 22, 2026
CVE-2026-96361: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 22, 2026
CVE-2026-96360: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Oct 22, 2026
CVE-2026-96359: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 22, 2026
CVE-2026-96358: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 22, 2026
CVE-2026-96357: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 22, 2026
CVE-2026-96356: Incorrect Authorization5.3 MediumN/A0%Oct 22, 2026
CVE-2026-96355: Improper Neutralization of Special Elements Used in a Template Engine9.1 CriticalN/A0%Oct 22, 2026
CVE-2026-87955: Missing Authorization4.3 MediumN/A0%Oct 22, 2026
CVE-2026-87954: Missing Authorization4.3 MediumN/A0%Oct 22, 2026
CVE-2026-87953: Server-Side Request Forgery (SSRF)3.3 LowN/A0%Oct 22, 2026
CVE-2026-87952: Authentication Bypass by Capture-replay3.1 LowN/A0%Oct 22, 2026
3376-3400 of 416436