The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-84219: Improper Neutralization of Input During Web Page Generation7.5 HighN/A0%Sep 6, 2026
CVE-2026-18480: Improper Privilege Management8.8 HighN/A0%Sep 6, 2026
CVE-2026-75816: Improper Authentication9.8 CriticalN/A1%Sep 6, 2026
CVE-2026-18056: Improper Authentication7.5 HighN/A0%Sep 6, 2026
CVE-2026-16310: Authorization Bypass Through User-Controlled Key9.8 CriticalN/A0%Sep 6, 2026
CVE-2026-86197: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Sep 5, 2026
CVE-2026-86193: Incorrect AuthorizationN/A8.7 High0%Sep 5, 2026
CVE-2026-86190: Exposure of Sensitive Information to an Unauthorized Actor9.1 Critical9.3 Critical0%Sep 5, 2026
CVE-2026-86184: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Sep 5, 2026
CVE-2025-9049: Missing Authorization8.8 HighN/A0%Sep 5, 2026
CVE-2026-86118: Missing Authorization4.3 Medium5.3 Medium0%Sep 5, 2026
CVE-2026-86114: Missing Authorization6.5 Medium7.1 High0%Sep 5, 2026
CVE-2026-81543: Improper Privilege Management8.8 HighN/A0%Sep 5, 2026
CVE-2026-75018: Missing Authorization4.3 MediumN/A0%Sep 5, 2026
CVE-2026-84935: Improper Neutralization of Input During Web Page Generation8.0 HighN/A0%Sep 5, 2026
CVE-2026-84934: Improper Neutralization of Input During Web Page Generation8.0 HighN/A0%Sep 5, 2026
CVE-2026-84931: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Sep 5, 2026
CVE-2026-84927: Missing Authorization2.7 LowN/A0%Sep 5, 2026
CVE-2026-84926: Exposure of Sensitive Information to an Unauthorized Actor2.7 LowN/A0%Sep 5, 2026
CVE-2026-84899: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Sep 5, 2026
CVE-2026-84896: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Sep 5, 2026
CVE-2026-84225: Authorization Bypass Through User-Controlled Key2.2 LowN/A0%Sep 5, 2026
CVE-2026-82846: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Sep 5, 2026
CVE-2026-81348: Exposure of Sensitive Information to an Unauthorized Actor3.7 LowN/A0%Sep 5, 2026
CVE-2026-78362: Improper Privilege Management9.8 CriticalN/A0%Sep 5, 2026
1026-1050 of 17376