The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-93491: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Sep 18, 2026
CVE-2026-93488: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Sep 18, 2026
CVE-2026-93578: Undefined Security Weakness5.9 MediumN/A0%Sep 18, 2026
CVE-2026-93575: Undefined Security Weakness7.5 HighN/A0%Sep 18, 2026
CVE-2026-93572: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Sep 18, 2026
CVE-2026-93563: Undefined Security Weakness7.5 HighN/A0%Sep 18, 2026
CVE-2026-93561: Undefined Security Weakness6.5 MediumN/A0%Sep 18, 2026
CVE-2026-87743: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization7.5 HighN/A1%Sep 18, 2026
CVE-2026-93494: Undefined Security Weakness7.5 HighN/A0%Sep 18, 2026
CVE-2026-93493: Improper Check for Certificate Revocation5.9 MediumN/A0%Sep 18, 2026
CVE-2026-89059: Improper Handling of Highly Compressed Data (Data Amplification)7.5 HighN/A1%Sep 18, 2026
CVE-2026-89058: Origin Validation Error7.4 HighN/A0%Sep 18, 2026
CVE-2026-75157: Incorrect Authorization7.5 HighN/A0%Sep 18, 2026
CVE-2026-50022: Unintended Proxy or Intermediary5.8 MediumN/A0%Sep 17, 2026
CVE-2026-92230: Missing Release of Memory after Effective Lifetime7.5 HighN/A0%Sep 17, 2026
CVE-2026-87935: Unrestricted Upload of File with Dangerous Type8.1 HighN/A1%Sep 17, 2026
CVE-2026-92580: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High1%Sep 16, 2026
CVE-2026-87976: Improper Limitation of a Pathname to a Restricted Directory8.1 High7.2 High1%Sep 16, 2026
CVE-2026-86089: Missing Authorization7.1 High2.3 Low0%Sep 16, 2026
CVE-2026-82561: Missing Authorization6.5 Medium5.9 Medium0%Sep 16, 2026
CVE-2026-81866: Missing Authorization4.3 Medium0.5 Low1%Sep 16, 2026
CVE-2026-76646: Uncontrolled Resource Consumption7.5 HighN/A1%Sep 16, 2026
CVE-2026-70469: Improper Handling of Highly Compressed Data (Data Amplification)7.5 HighN/A1%Sep 16, 2026
CVE-2026-68536: Server-Side Request Forgery (SSRF)9.8 CriticalN/A0%Sep 16, 2026
CVE-2026-76420: Improper Authorization9.0 CriticalN/A0%Sep 16, 2026
426-450 of 4430
‹›