The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-92717: Missing Authentication for Critical Function9.1 Critical9.3 Critical0%Sep 16, 2026
CVE-2026-92716: Authorization Bypass Through User-Controlled Key9.6 Critical8.6 High0%Sep 16, 2026
CVE-2026-92605: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Sep 16, 2026
CVE-2026-92604: Improper Limitation of a Pathname to a Restricted Directory8.1 High7.2 High1%Sep 16, 2026
CVE-2026-92416: Reachable Assertion4.3 Medium5.3 Medium1%Sep 16, 2026
CVE-2026-92413: NULL Pointer Dereference4.3 Medium2.1 Low1%Sep 16, 2026
CVE-2026-92406: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Sep 16, 2026
CVE-2026-88593: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 16, 2026
CVE-2026-85387: Insufficient Session Expiration7.1 High2.0 Low0%Sep 16, 2026
CVE-2026-84397: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Sep 16, 2026
CVE-2026-69147: Uncontrolled Resource Consumption6.5 MediumN/A1%Sep 16, 2026
CVE-2026-51990: Improper Control of Generation of Code9.8 CriticalN/A0%Sep 16, 2026
CVE-2026-47094: Authorization Bypass Through User-Controlled Key8.8 High8.7 High1%Sep 16, 2026
CVE-2026-18120: Missing Authorization5.9 Medium6.3 Medium0%Sep 16, 2026
CVE-2026-92603: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Sep 16, 2026
CVE-2026-92602: Server-Side Request Forgery (SSRF)7.1 High7.1 High0%Sep 16, 2026
CVE-2026-92601: Missing Authorization6.5 Medium7.1 High0%Sep 16, 2026
CVE-2026-92600: Missing Authorization6.5 Medium7.1 High0%Sep 16, 2026
CVE-2026-92405: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Sep 16, 2026
CVE-2026-92402: Missing Authorization6.3 Medium5.3 Medium0%Sep 16, 2026
CVE-2026-92401: Improper Authentication7.3 High6.9 Medium1%Sep 16, 2026
CVE-2026-92399: Heap-based Buffer Overflow7.3 High5.5 Medium1%Sep 16, 2026
CVE-2026-92398: Improper Neutralization of Special Elements used in an OS Command9.1 Critical8.5 High3%Sep 16, 2026
CVE-2026-87031: Missing Authorization2.7 Low2.1 Low0%Sep 16, 2026
CVE-2026-87028: Missing Authorization6.5 Medium5.3 Medium0%Sep 16, 2026
7501-7525 of 742608
‹›