The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-91459: Deserialization of Untrusted Data7.8 HighN/A0%Oct 20, 2026
CVE-2026-91458: Improper Input Validation7.8 HighN/A0%Oct 20, 2026
CVE-2026-91457: Improper Input Validation7.8 HighN/A0%Oct 20, 2026
CVE-2026-91455: URL Redirection to Untrusted Site5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91453: Improper Access Control5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91452: Improper Access Control5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91451: Improper Access Control5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91450: Missing Authentication for Critical Function7.4 HighN/A0%Oct 20, 2026
CVE-2026-91449: Missing Authentication for Critical Function7.4 HighN/A0%Oct 20, 2026
CVE-2026-91448: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
CVE-2026-91447: Improper Access Control7.5 HighN/A0%Oct 20, 2026
CVE-2026-91446: Improper Privilege Management6.7 MediumN/A0%Oct 20, 2026
CVE-2026-91445: Missing Authentication for Critical Function8.2 HighN/A0%Oct 20, 2026
CVE-2026-91444: Improper Privilege Management6.7 MediumN/A0%Oct 20, 2026
CVE-2026-91443: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91442: Missing Authentication for Critical Function8.8 HighN/A0%Oct 20, 2026
CVE-2026-91441: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91440: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91439: Improper Privilege Management5.5 MediumN/A0%Oct 20, 2026
CVE-2026-91438: Improper Access Control7.1 HighN/A0%Oct 20, 2026
CVE-2026-91437: Improper Access Control8.7 HighN/A0%Oct 20, 2026
CVE-2026-91436: Improper Access Control3.9 LowN/A0%Oct 20, 2026
CVE-2026-91435: Uncontrolled Resource Consumption6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91434: Improper Privilege Management6.7 MediumN/A0%Oct 20, 2026
CVE-2026-91433: Missing Authentication for Critical Function7.2 HighN/A0%Oct 20, 2026
4201-4225 of 417776