The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-63000: Cross-Site Request Forgery (CSRF)6.4 MediumN/A0%Sep 23, 2026
CVE-2026-62998: Improper Input Validation4.3 MediumN/A0%Sep 23, 2026
CVE-2026-61834: Improperly Controlled Modification of Dynamically-Determined Object Attributes4.3 MediumN/A0%Sep 23, 2026
CVE-2026-61413: Improper Privilege Management6.8 MediumN/A0%Sep 23, 2026
CVE-2026-55610: Authorization Bypass Through User-Controlled Key8.7 HighN/A0%Sep 23, 2026
CVE-2026-96560: Deserialization of Untrusted Data9.8 Critical9.3 Critical1%Sep 23, 2026
CVE-2026-96559: Undefined Security WeaknessN/AN/AN/ASep 23, 2026
CVE-2026-96512: Incorrect Authorization7.8 HighN/A0%Sep 23, 2026
CVE-2026-86708: Use of Hard-coded Cryptographic Key10.0 CriticalN/A1%Sep 23, 2026
CVE-2026-86683: Improper Input Validation8.1 HighN/A1%Sep 23, 2026
CVE-2026-86681: Missing Authentication for Critical Function7.6 HighN/A0%Sep 23, 2026
CVE-2026-86679: Improper Input Validation7.1 HighN/A1%Sep 23, 2026
CVE-2026-86678: Authorization Bypass Through User-Controlled Key8.8 HighN/A1%Sep 23, 2026
CVE-2026-86677: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A2%Sep 23, 2026
CVE-2026-59167: Improper Neutralization of Input During Web Page Generation10.0 CriticalN/A0%Sep 23, 2026
CVE-2026-18179: Missing Authorization6.5 MediumN/A0%Sep 23, 2026
CVE-2026-18177: Missing Authorization7.1 HighN/A0%Sep 23, 2026
CVE-2026-12974: Improper Validation of Specified Quantity in InputN/A7.9 High0%Sep 23, 2026
CVE-2026-95676: Improper Authentication7.5 High7.4 High0%Sep 23, 2026
CVE-2026-86247: Race Condition within a Thread7.4 HighN/A0%Sep 23, 2026
CVE-2026-86246: Initialization of a Resource with an Insecure Default9.1 CriticalN/A0%Sep 23, 2026
CVE-2026-86243: Buffer Over-read7.5 HighN/A1%Sep 23, 2026
CVE-2026-84091: Improper Authentication5.3 MediumN/A0%Sep 23, 2026
CVE-2026-77112: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Sep 23, 2026
CVE-2026-76980: Improper Input Validation7.4 HighN/A0%Sep 23, 2026
7026-7050 of 402816
‹›