The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-91214: Improper Authentication9.8 CriticalN/A0%Oct 20, 2026
CVE-2026-91213: Improper Authentication8.8 HighN/A0%Oct 20, 2026
CVE-2026-91212: Improper Access Control8.6 HighN/A0%Oct 20, 2026
CVE-2026-91211: Improper Access Control8.7 HighN/A0%Oct 20, 2026
CVE-2026-91210: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91209: Improper Access Control4.2 MediumN/A0%Oct 20, 2026
CVE-2026-91208: Uncontrolled Resource Consumption5.1 MediumN/A0%Oct 20, 2026
CVE-2026-87423: Improper Privilege Management4.5 MediumN/A0%Oct 20, 2026
CVE-2026-87422: Improper Authorization2.5 LowN/A0%Oct 20, 2026
CVE-2026-87421: Improper Authorization7.1 HighN/A0%Oct 20, 2026
CVE-2026-87420: Improper Access Control8.8 HighN/A0%Oct 20, 2026
CVE-2026-87419: Missing Authentication for Critical Function8.8 HighN/A0%Oct 20, 2026
CVE-2026-87418: Exposure of Sensitive Information to an Unauthorized Actor2.5 LowN/A0%Oct 20, 2026
CVE-2026-87417: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
CVE-2026-87416: Exposure of Sensitive Information to an Unauthorized Actor3.7 LowN/A0%Oct 20, 2026
CVE-2026-87415: Improper Access Control5.3 MediumN/A0%Oct 20, 2026
CVE-2026-87414: Insufficient Verification of Data Authenticity3.1 LowN/A0%Oct 20, 2026
CVE-2026-87413: Uncontrolled Resource Consumption5.5 MediumN/A0%Oct 20, 2026
CVE-2026-87412: Exposure of Sensitive Information to an Unauthorized Actor2.7 LowN/A0%Oct 20, 2026
CVE-2026-87411: Uncontrolled Resource Consumption5.5 MediumN/A0%Oct 20, 2026
CVE-2026-87410: Exposure of Sensitive Information to an Unauthorized Actor6.8 MediumN/A0%Oct 20, 2026
CVE-2026-87409: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 20, 2026
CVE-2026-87408: Cross-Site Request Forgery (CSRF)8.7 HighN/A0%Oct 20, 2026
CVE-2026-87407: URL Redirection to Untrusted Site6.5 MediumN/A0%Oct 20, 2026
CVE-2026-87404: Missing Authentication for Critical Function7.5 HighN/A0%Oct 20, 2026
401-425 of 13403
‹›