The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-87325: Exposure of Sensitive Information to an Unauthorized Actor6.4 MediumN/A0%Oct 20, 2026
CVE-2026-87324: Exposure of Sensitive Information to an Unauthorized Actor6.4 MediumN/A0%Oct 20, 2026
CVE-2026-87323: Improper Access Control5.5 MediumN/A0%Oct 20, 2026
CVE-2026-87322: Improper Access Control8.4 HighN/A0%Oct 20, 2026
CVE-2026-87321: Improper Access Control6.4 MediumN/A0%Oct 20, 2026
CVE-2026-87320: Improper Access Control6.7 MediumN/A0%Oct 20, 2026
CVE-2026-87319: Exposure of Sensitive Information to an Unauthorized Actor6.3 MediumN/A0%Oct 20, 2026
CVE-2026-87318: Improper Access Control6.3 MediumN/A0%Oct 20, 2026
CVE-2026-87317: Improper Access Control4.8 MediumN/A0%Oct 20, 2026
CVE-2026-87316: Improper Access Control7.8 HighN/A0%Oct 20, 2026
CVE-2026-87315: Improper Access Control7.5 HighN/A0%Oct 20, 2026
CVE-2026-87314: Missing Authentication for Critical Function7.4 HighN/A0%Oct 20, 2026
CVE-2026-87313: Missing Authentication for Critical Function8.8 HighN/A0%Oct 20, 2026
CVE-2026-87312: Improper Access Control7.5 HighN/A0%Oct 20, 2026
CVE-2026-87311: Improper Access Control5.6 MediumN/A0%Oct 20, 2026
CVE-2026-87310: Improper Access Control8.8 HighN/A0%Oct 20, 2026
CVE-2026-87309: Improper Access Control8.1 HighN/A0%Oct 20, 2026
CVE-2026-87308: Exposure of Sensitive Information to an Unauthorized Actor7.1 HighN/A0%Oct 20, 2026
CVE-2026-87307: Exposure of Sensitive Information to an Unauthorized Actor7.1 HighN/A0%Oct 20, 2026
CVE-2026-87306: Exposure of Sensitive Information to an Unauthorized Actor8.1 HighN/A0%Oct 20, 2026
CVE-2026-87305: Improper Access Control8.1 HighN/A0%Oct 20, 2026
CVE-2026-87304: Improper Access Control8.6 HighN/A0%Oct 20, 2026
CVE-2026-87303: Improper Access Control5.9 MediumN/A0%Oct 20, 2026
CVE-2026-87302: Improper Authentication9.1 CriticalN/A0%Oct 20, 2026
CVE-2026-87301: Exposure of Sensitive Information to an Unauthorized Actor8.4 HighN/A0%Oct 20, 2026
501-525 of 13402