The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-76420: Improper Authorization9.0 CriticalN/A0%Sep 16, 2026
CVE-2026-86792: Use of Externally-Controlled Input to Select Classes or Code8.8 HighN/A1%Sep 16, 2026
CVE-2026-86466: Origin Validation Error8.1 HighN/A0%Sep 16, 2026
CVE-2026-84501: Improper Output Neutralization for Logs5.3 MediumN/A1%Sep 16, 2026
CVE-2026-84439: Improper Output Neutralization for Logs5.3 MediumN/A1%Sep 16, 2026
CVE-2026-82310: Insufficient Session Expiration7.2 HighN/A1%Sep 16, 2026
CVE-2026-79993: Missing Authorization7.5 HighN/A1%Sep 16, 2026
CVE-2026-76187: Improper Authentication9.8 CriticalN/A1%Sep 16, 2026
CVE-2026-76186: Reliance on Cookies without Validation and Integrity Checking9.1 CriticalN/A1%Sep 16, 2026
CVE-2026-59969: Improper Validation of Certificate with Host Mismatch7.5 HighN/A0%Sep 16, 2026
CVE-2026-59739: Missing Authorization7.5 HighN/A1%Sep 16, 2026
CVE-2026-86465: Authorization Bypass Through User-Controlled Key6.5 MediumN/A1%Sep 16, 2026
CVE-2026-86462: Insufficient Session Expiration9.1 CriticalN/A1%Sep 16, 2026
CVE-2026-82311: Insufficient Session Expiration9.8 CriticalN/A1%Sep 16, 2026
CVE-2026-55226: Improper Privilege Management5.4 MediumN/A0%Sep 15, 2026
CVE-2026-55225: Improper Privilege Management8.0 HighN/A0%Sep 15, 2026
CVE-2026-81320: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Sep 15, 2026
CVE-2026-81303: Unintended Proxy or Intermediary6.3 MediumN/A0%Sep 15, 2026
CVE-2026-82438: Origin Validation Error8.1 HighN/A0%Sep 14, 2026
CVE-2026-82437: Missing Authorization4.3 MediumN/A0%Sep 14, 2026
CVE-2026-82435: Memory Allocation with Excessive Size Value9.8 CriticalN/A1%Sep 14, 2026
CVE-2026-82434: Insufficiently Protected Credentials6.5 Medium10.0 Critical1%Sep 14, 2026
CVE-2026-82433: Insufficiently Protected Credentials6.5 MediumN/A0%Sep 14, 2026
CVE-2026-82432: Incorrect Authorization8.1 HighN/A0%Sep 14, 2026
CVE-2026-82431: Incorrect Authorization9.8 CriticalN/A0%Sep 14, 2026
476-500 of 4456