The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-91565: Improper Access Control6.4 MediumN/A0%Oct 20, 2026
CVE-2026-91563: Improper Privilege Management8.8 HighN/A0%Oct 20, 2026
CVE-2026-91562: Improper Access Control4.4 MediumN/A0%Oct 20, 2026
CVE-2026-91559: Improper Access Control4.4 MediumN/A0%Oct 20, 2026
CVE-2026-91557: Improper Privilege Management7.0 HighN/A0%Oct 20, 2026
CVE-2026-91555: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%Oct 20, 2026
CVE-2026-91554: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91553: Improper Access Control4.4 MediumN/A0%Oct 20, 2026
CVE-2026-91552: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
CVE-2026-91550: Improper Access Control8.8 HighN/A0%Oct 20, 2026
CVE-2026-91549: URL Redirection to Untrusted Site7.8 HighN/A0%Oct 20, 2026
CVE-2026-91547: Improper Privilege Management5.5 MediumN/A0%Oct 20, 2026
CVE-2026-91546: Missing Authentication for Critical Function8.1 HighN/A0%Oct 20, 2026
CVE-2026-91545: Improper Access Control7.8 HighN/A0%Oct 20, 2026
CVE-2026-91542: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
CVE-2026-91541: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91539: Improper Privilege Management7.8 HighN/A0%Oct 20, 2026
CVE-2026-91537: Improper Privilege Management7.8 HighN/A0%Oct 20, 2026
CVE-2026-91536: Improper Access Control5.0 MediumN/A0%Oct 20, 2026
CVE-2026-91535: Missing Authentication for Critical Function8.8 HighN/A0%Oct 20, 2026
CVE-2026-91534: Missing Authentication for Critical Function8.6 HighN/A0%Oct 20, 2026
CVE-2026-91532: Missing Authentication for Critical Function8.8 HighN/A0%Oct 20, 2026
CVE-2026-91530: Improper Access Control4.4 MediumN/A0%Oct 20, 2026
CVE-2026-91528: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Oct 20, 2026
CVE-2026-91527: Improper Access Control8.8 HighN/A0%Oct 20, 2026
4101-4125 of 413502