The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-91638: Improper Access Control9.9 CriticalN/A0%Oct 20, 2026
CVE-2026-91637: Improper Access Control9.9 CriticalN/A0%Oct 20, 2026
CVE-2026-91636: Exposure of Sensitive Information to an Unauthorized Actor7.7 HighN/A0%Oct 20, 2026
CVE-2026-91635: Improper Access Control8.1 HighN/A0%Oct 20, 2026
CVE-2026-91634: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91633: Improper Access Control6.0 MediumN/A0%Oct 20, 2026
CVE-2026-91632: Exposure of Sensitive Information to an Unauthorized Actor7.7 HighN/A0%Oct 20, 2026
CVE-2026-91631: Exposure of Sensitive Information to an Unauthorized Actor5.0 MediumN/A0%Oct 20, 2026
CVE-2026-91630: Exposure of Sensitive Information to an Unauthorized Actor6.8 MediumN/A0%Oct 20, 2026
CVE-2026-91629: Exposure of Sensitive Information to an Unauthorized Actor4.7 MediumN/A0%Oct 20, 2026
CVE-2026-91628: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Oct 20, 2026
CVE-2026-91627: Improper Privilege Management7.8 HighN/A0%Oct 20, 2026
CVE-2026-91625: Missing Authentication for Critical Function8.2 HighN/A0%Oct 20, 2026
CVE-2026-91624: Improper Authentication9.1 CriticalN/A0%Oct 20, 2026
CVE-2026-91623: Improper Access Control7.4 HighN/A0%Oct 20, 2026
CVE-2026-91622: Improper Access Control9.3 CriticalN/A0%Oct 20, 2026
CVE-2026-91617: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Oct 20, 2026
CVE-2026-91616: Exposure of Sensitive Information to an Unauthorized Actor3.7 LowN/A0%Oct 20, 2026
CVE-2026-91615: Improper Access Control6.3 MediumN/A0%Oct 20, 2026
CVE-2026-91614: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A0%Oct 20, 2026
CVE-2026-91613: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A0%Oct 20, 2026
CVE-2026-91612: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A0%Oct 20, 2026
CVE-2026-91610: Improper Access Control8.8 HighN/A0%Oct 20, 2026
CVE-2026-91609: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91608: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
51-75 of 13409
‹›