The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-91265: Improper Authentication9.1 CriticalN/A0%Oct 20, 2026
CVE-2026-91264: Improper Access Control3.7 LowN/A0%Oct 20, 2026
CVE-2026-91263: Incorrect Authorization4.9 MediumN/A0%Oct 20, 2026
CVE-2026-91262: Improper Access Control5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91261: Exposure of Sensitive Information to an Unauthorized Actor3.1 LowN/A0%Oct 20, 2026
CVE-2026-91260: Improper Privilege Management7.2 HighN/A0%Oct 20, 2026
CVE-2026-91259: Improper Authentication8.8 HighN/A0%Oct 20, 2026
CVE-2026-91257: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91256: Uncontrolled Resource Consumption7.1 HighN/A0%Oct 20, 2026
CVE-2026-91255: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 20, 2026
CVE-2026-91254: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 20, 2026
CVE-2026-91253: Improper Privilege Management7.8 HighN/A0%Oct 20, 2026
CVE-2026-91252: Uncontrolled Resource Consumption8.2 HighN/A0%Oct 20, 2026
CVE-2026-91251: Improper Access Control9.9 CriticalN/A0%Oct 20, 2026
CVE-2026-91250: Improper Privilege Management9.9 CriticalN/A0%Oct 20, 2026
CVE-2026-91249: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A0%Oct 20, 2026
CVE-2026-91248: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91247: Uncontrolled Resource Consumption5.9 MediumN/A0%Oct 20, 2026
CVE-2026-91246: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%Oct 20, 2026
CVE-2026-91245: Improper Authorization6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91244: Uncontrolled Resource Consumption4.7 MediumN/A0%Oct 20, 2026
CVE-2026-91243: Improper Access Control9.6 CriticalN/A0%Oct 20, 2026
CVE-2026-91242: Improper Access Control7.4 HighN/A0%Oct 20, 2026
CVE-2026-91241: Improper Access Control9.1 CriticalN/A0%Oct 20, 2026
CVE-2026-91240: Improper Access Control5.9 MediumN/A0%Oct 20, 2026
351-375 of 13403
‹›