The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-91467: Improper Authentication6.6 MediumN/A0%Oct 20, 2026
CVE-2026-91466: Improper Access Control6.4 MediumN/A0%Oct 20, 2026
CVE-2026-91465: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
CVE-2026-91464: Use After Free5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91463: Use After Free5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91462: Improper Access Control5.9 MediumN/A0%Oct 20, 2026
CVE-2026-91461: Improper Certificate Validation3.7 LowN/A0%Oct 20, 2026
CVE-2026-91460: Deserialization of Untrusted Data7.8 HighN/A0%Oct 20, 2026
CVE-2026-91459: Deserialization of Untrusted Data7.8 HighN/A0%Oct 20, 2026
CVE-2026-91458: Improper Input Validation7.8 HighN/A0%Oct 20, 2026
CVE-2026-91457: Improper Input Validation7.8 HighN/A0%Oct 20, 2026
CVE-2026-91455: URL Redirection to Untrusted Site5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91453: Improper Access Control5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91452: Improper Access Control5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91451: Improper Access Control5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91450: Missing Authentication for Critical Function7.4 HighN/A0%Oct 20, 2026
CVE-2026-91449: Missing Authentication for Critical Function7.4 HighN/A0%Oct 20, 2026
CVE-2026-91448: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
CVE-2026-91447: Improper Access Control7.5 HighN/A0%Oct 20, 2026
CVE-2026-91446: Improper Privilege Management6.7 MediumN/A0%Oct 20, 2026
CVE-2026-91445: Missing Authentication for Critical Function8.2 HighN/A0%Oct 20, 2026
CVE-2026-91444: Improper Privilege Management6.7 MediumN/A0%Oct 20, 2026
CVE-2026-91443: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91442: Missing Authentication for Critical Function8.8 HighN/A0%Oct 20, 2026
CVE-2026-91441: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
4176-4200 of 416436