The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-91607: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Oct 20, 2026
CVE-2026-91604: Improper Access Control7.5 HighN/A0%Oct 20, 2026
CVE-2026-91600: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Oct 20, 2026
CVE-2026-91598: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Oct 20, 2026
CVE-2026-91597: Improper Access Control8.3 HighN/A0%Oct 20, 2026
CVE-2026-91590: Improper Access Control5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91588: Insufficient Verification of Data Authenticity6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91582: Uncontrolled Resource Consumption3.7 LowN/A0%Oct 20, 2026
CVE-2026-91579: URL Redirection to Untrusted Site8.8 HighN/A0%Oct 20, 2026
CVE-2026-91577: Improper Access Control6.4 MediumN/A0%Oct 20, 2026
CVE-2026-91576: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91574: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91573: Missing Authentication for Critical Function8.2 HighN/A0%Oct 20, 2026
CVE-2026-91568: Improper Access Control7.7 HighN/A0%Oct 20, 2026
CVE-2026-91565: Improper Access Control6.4 MediumN/A0%Oct 20, 2026
CVE-2026-91563: Improper Privilege Management8.8 HighN/A0%Oct 20, 2026
CVE-2026-91562: Improper Access Control4.4 MediumN/A0%Oct 20, 2026
CVE-2026-91559: Improper Access Control4.4 MediumN/A0%Oct 20, 2026
CVE-2026-91557: Improper Privilege Management7.0 HighN/A0%Oct 20, 2026
CVE-2026-91555: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%Oct 20, 2026
CVE-2026-91554: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91553: Improper Access Control4.4 MediumN/A0%Oct 20, 2026
CVE-2026-91552: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
CVE-2026-91550: Improper Access Control8.8 HighN/A0%Oct 20, 2026
CVE-2026-91549: URL Redirection to Untrusted Site7.8 HighN/A0%Oct 20, 2026
76-100 of 13409