The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-91290: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Oct 20, 2026
CVE-2026-91289: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91288: Improper Access Control7.4 HighN/A0%Oct 20, 2026
CVE-2026-91287: Improper Access Control8.1 HighN/A0%Oct 20, 2026
CVE-2026-91286: Improper Access Control8.2 HighN/A0%Oct 20, 2026
CVE-2026-91285: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91284: Uncontrolled Resource Consumption6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91283: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Oct 20, 2026
CVE-2026-91282: Missing Authentication for Critical Function5.9 MediumN/A0%Oct 20, 2026
CVE-2026-91281: Improper Access Control6.1 MediumN/A0%Oct 20, 2026
CVE-2026-91280: Improper Access Control6.1 MediumN/A0%Oct 20, 2026
CVE-2026-91279: Improper Access Control6.1 MediumN/A0%Oct 20, 2026
CVE-2026-91278: Improper Privilege Management5.5 MediumN/A0%Oct 20, 2026
CVE-2026-91277: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91276: Improper Access Control5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91275: Improper Access Control6.6 MediumN/A0%Oct 20, 2026
CVE-2026-91274: Missing Authentication for Critical Function6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91273: Improper Access Control8.6 HighN/A0%Oct 20, 2026
CVE-2026-91272: Improper Access Control7.4 HighN/A0%Oct 20, 2026
CVE-2026-91271: Improper Access Control8.1 HighN/A0%Oct 20, 2026
CVE-2026-91270: Missing Authentication for Critical Function8.8 HighN/A0%Oct 20, 2026
CVE-2026-91269: Improper Access Control8.1 HighN/A0%Oct 20, 2026
CVE-2026-91268: Improper Access Control8.8 HighN/A0%Oct 20, 2026
CVE-2026-91267: Missing Authentication for Critical Function8.6 HighN/A0%Oct 20, 2026
CVE-2026-91266: Improper Access Control8.4 HighN/A0%Oct 20, 2026
326-350 of 13403
‹›