The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-39717: Missing Authorization4.3 MediumN/A0%Oct 2, 2026
CVE-2026-39444: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Oct 2, 2026
CVE-2026-39439: Missing Authorization6.5 MediumN/A0%Oct 2, 2026
CVE-2026-32585: Missing Authorization6.5 MediumN/A0%Oct 2, 2026
CVE-2026-85209: Missing Authorization6.5 MediumN/A0%Oct 2, 2026
CVE-2026-104472: Missing Authorization7.5 High8.7 High0%Oct 2, 2026
CVE-2026-104467: Missing Authorization8.1 High9.2 Critical0%Oct 2, 2026
CVE-2026-104450: Improper Neutralization of Input During Web Page Generation6.5 Medium8.2 High0%Oct 2, 2026
CVE-2026-104444: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Oct 2, 2026
CVE-2026-104443: Incorrect Authorization8.1 High7.2 High0%Oct 2, 2026
CVE-2026-104438: Missing Authorization5.3 Medium8.7 High0%Oct 2, 2026
CVE-2026-103762: Missing Authorization5.3 Medium6.9 Medium0%Oct 2, 2026
CVE-2026-94541: Missing Authorization9.8 CriticalN/A0%Oct 2, 2026
CVE-2026-94405: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Oct 2, 2026
CVE-2026-94180: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 2, 2026
CVE-2026-104403: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Oct 2, 2026
CVE-2026-80337: Missing Authorization5.3 MediumN/A0%Oct 2, 2026
CVE-2026-85005: Missing Authorization5.4 MediumN/A0%Oct 2, 2026
CVE-2026-90988: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 2, 2026
CVE-2026-104054: Missing Authorization6.3 Medium2.1 Low0%Oct 2, 2026
CVE-2026-51879: Authorization Bypass Through User-Controlled Key9.1 CriticalN/A0%Oct 1, 2026
CVE-2026-51878: Improper Access Control4.3 MediumN/A0%Oct 1, 2026
CVE-2026-51876: Improper Authorization9.1 CriticalN/A0%Oct 1, 2026
CVE-2026-104356: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)5.9 Medium8.2 High0%Oct 1, 2026
CVE-2026-104183: Improperly Controlled Modification of Object Prototype Attributes5.1 MediumN/A0%Oct 1, 2026
1151-1175 of 12050
‹›