The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-96380: Drupal CSS Usage Analyzer: Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing6.5 MediumN/A0%Oct 22, 2026
CVE-2026-96373: Drupal Webform: Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing3.3 LowN/A0%Oct 22, 2026
CVE-2026-96370: Drupal Webform: Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery5.4 MediumN/A0%Oct 22, 2026
CVE-2026-96366: Drupal Webform: Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing5.3 MediumN/A0%Oct 22, 2026
CVE-2026-96356: Drupal Webform: Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing5.3 MediumN/A0%Oct 22, 2026
CVE-2026-87955: Drupal Ultimate Table Field: Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing4.3 MediumN/A0%Oct 22, 2026
CVE-2026-87954: Drupal Taxonomy Term Glossary: Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing4.3 MediumN/A0%Oct 22, 2026
CVE-2026-87943: Drupal SAML SSO - Service Provider: Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing6.5 MediumN/A0%Oct 22, 2026
CVE-2026-84921: Drupal Webform Submissions Delete: Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing5.3 MediumN/A0%Oct 22, 2026
CVE-2026-84920: Drupal Unpublished Node Permissions: Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing5.3 MediumN/A0%Oct 22, 2026
CVE-2026-84917: Drupal Jsonapi Role Access: Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing6.5 MediumN/A0%Oct 22, 2026
CVE-2026-84916: Drupal Islandora: Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing3.7 LowN/A0%Oct 22, 2026
CVE-2026-84914: Drupal Calculate Working Days: Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing5.3 MediumN/A0%Oct 22, 2026
CVE-2026-84913: Drupal AI Translate: Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing4.6 MediumN/A0%Oct 22, 2026
CVE-2026-84912: Drupal AI (Artificial Intelligence): Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing4.6 MediumN/A0%Oct 22, 2026
CVE-2026-84910: Drupal Advanced Search: Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing4.2 MediumN/A0%Oct 22, 2026
CVE-2026-114715: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the…6.8 MediumN/A0%Oct 22, 2026
CVE-2026-114661: openremote: OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any…8.5 High9.0 Critical0%Oct 22, 2026
CVE-2026-114659: getgrav grav-plugin-flex-objects: Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic…6.5 Medium7.1 High0%Oct 22, 2026
CVE-2026-114658: getgrav grav-plugin-login: Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that…8.8 High8.7 High0%Oct 22, 2026
CVE-2026-114639: traefik: Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request…8.7 High7.0 High0%Oct 22, 2026
CVE-2026-114633: WWBN AVideo: WWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that allows delegated Users Admin accounts…6.5 Medium7.0 High0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-13319: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 22, 2026
CVE-2026-76530: Splunk Splunk SOAR: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…8.8 HighN/A0%Oct 21, 2026
CVE-2026-76306: Splunk Splunk SOAR: In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the…7.5 HighN/A0%Oct 21, 2026
76-100 of 12121
‹›