The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-91495: Improper Authentication9.8 CriticalN/A0%Oct 20, 2026
CVE-2026-91494: Improper Access Control7.4 HighN/A0%Oct 20, 2026
CVE-2026-91493: Improper Authentication7.5 HighN/A0%Oct 20, 2026
CVE-2026-91492: Improper Access Control8.7 HighN/A0%Oct 20, 2026
CVE-2026-91491: Improper Authentication9.8 CriticalN/A0%Oct 20, 2026
CVE-2026-91490: Improper Authentication9.1 CriticalN/A0%Oct 20, 2026
CVE-2026-91489: Improper Access Control7.1 HighN/A0%Oct 20, 2026
CVE-2026-91488: Improper Access Control7.1 HighN/A0%Oct 20, 2026
CVE-2026-91487: Improper Access Control4.8 MediumN/A0%Oct 20, 2026
CVE-2026-91486: Improper Access Control4.4 MediumN/A0%Oct 20, 2026
CVE-2026-91485: Improper Access Control3.8 LowN/A0%Oct 20, 2026
CVE-2026-91484: Improper Access Control7.5 HighN/A0%Oct 20, 2026
CVE-2026-91483: Deserialization of Untrusted Data7.8 HighN/A0%Oct 20, 2026
CVE-2026-91482: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91481: Improper Access Control5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91480: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91479: Uncontrolled Resource Consumption6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91478: Improper Access Control8.8 HighN/A0%Oct 20, 2026
CVE-2026-91477: Insecure Storage of Sensitive Information3.1 LowN/A0%Oct 20, 2026
CVE-2026-91476: Undefined Security Weakness5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91475: Improper Access Control6.6 MediumN/A0%Oct 20, 2026
CVE-2026-91474: Improper Access Control6.1 MediumN/A0%Oct 20, 2026
CVE-2026-91473: Improper Privilege Management7.8 HighN/A0%Oct 20, 2026
CVE-2026-91471: Improper Access Control3.7 LowN/A0%Oct 20, 2026
CVE-2026-91468: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
4151-4175 of 416436