The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-95848: Not Failing Securely9.1 Critical9.3 Critical0%Sep 23, 2026
CVE-2026-95847: Improper Control of Resource Identifiers7.5 High8.8 High0%Sep 23, 2026
CVE-2026-95846: Missing Authorization7.5 High8.7 High0%Sep 23, 2026
CVE-2026-95845: Allocation of Resources Without Limits or Throttling7.5 High8.7 High0%Sep 23, 2026
CVE-2026-95844: Uncontrolled Recursion7.5 High8.7 High0%Sep 23, 2026
CVE-2026-95843: Improper Input Validation7.5 High8.7 High0%Sep 23, 2026
CVE-2026-95842: Uncaught Exception7.5 High8.7 High0%Sep 23, 2026
CVE-2026-85724: Incorrect Authorization9.6 CriticalN/A0%Sep 23, 2026
CVE-2026-93769: Improper Neutralization of Input During Web Page GenerationN/A7.2 High0%Sep 23, 2026
CVE-2026-19267: Missing Authentication for Critical Function6.2 MediumN/A0%Sep 23, 2026
CVE-2026-18505: URL Redirection to Untrusted Site5.4 MediumN/A0%Sep 23, 2026
CVE-2026-18490: Deserialization of Untrusted Data8.8 HighN/A0%Sep 23, 2026
CVE-2026-59167: Improper Neutralization of Input During Web Page Generation10.0 CriticalN/A0%Sep 23, 2026
CVE-2026-5696: Improper Neutralization of Input During Web Page GenerationN/A5.9 Medium0%Sep 23, 2026
CVE-2026-96454: Missing Authorization8.2 HighN/A0%Sep 23, 2026
CVE-2026-95627: Incorrect Permission Assignment for Critical Resource7.7 HighN/A0%Sep 23, 2026
CVE-2026-91818: Use After Free5.5 MediumN/A0%Sep 23, 2026
CVE-2026-91817: Out-of-bounds Read6.1 MediumN/A0%Sep 23, 2026
CVE-2026-91816: Use After Free7.8 HighN/A0%Sep 23, 2026
CVE-2026-91806: Use After Free7.8 HighN/A0%Sep 23, 2026
CVE-2026-91799: Use After Free7.8 HighN/A0%Sep 23, 2026
CVE-2026-91792: Use After Free7.8 HighN/A0%Sep 23, 2026
CVE-2026-91791: Use After Free7.8 HighN/A0%Sep 23, 2026
CVE-2026-91788: Exposure of Resource to Wrong Sphere4.7 MediumN/A0%Sep 23, 2026
CVE-2026-50228: Active Debug CodeN/A6.1 Medium0%Sep 23, 2026
551-575 of 16386
‹›