The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-91547: Improper Privilege Management5.5 MediumN/A0%Oct 20, 2026
CVE-2026-91546: Missing Authentication for Critical Function8.1 HighN/A0%Oct 20, 2026
CVE-2026-91545: Improper Access Control7.8 HighN/A0%Oct 20, 2026
CVE-2026-91542: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
CVE-2026-91541: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91539: Improper Privilege Management7.8 HighN/A0%Oct 20, 2026
CVE-2026-91537: Improper Privilege Management7.8 HighN/A0%Oct 20, 2026
CVE-2026-91536: Improper Access Control5.0 MediumN/A0%Oct 20, 2026
CVE-2026-91535: Missing Authentication for Critical Function8.8 HighN/A0%Oct 20, 2026
CVE-2026-91534: Missing Authentication for Critical Function8.6 HighN/A0%Oct 20, 2026
CVE-2026-91532: Missing Authentication for Critical Function8.8 HighN/A0%Oct 20, 2026
CVE-2026-91530: Improper Access Control4.4 MediumN/A0%Oct 20, 2026
CVE-2026-91528: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Oct 20, 2026
CVE-2026-91527: Improper Access Control8.8 HighN/A0%Oct 20, 2026
CVE-2026-91526: URL Redirection to Untrusted Site4.7 MediumN/A0%Oct 20, 2026
CVE-2026-91524: Uncontrolled Resource Consumption4.3 MediumN/A0%Oct 20, 2026
CVE-2026-91523: Improper Access Control5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91521: Missing Authentication for Critical Function8.8 HighN/A0%Oct 20, 2026
CVE-2026-91520: Improper Access Control8.8 HighN/A0%Oct 20, 2026
CVE-2026-91519: Incorrect Authorization6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91518: Improper Access Control5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91517: Improper Access Control8.0 HighN/A0%Oct 20, 2026
CVE-2026-91515: Missing Authentication for Critical Function7.5 HighN/A0%Oct 20, 2026
CVE-2026-91514: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91512: Improper Access Control7.2 HighN/A0%Oct 20, 2026
101-125 of 13409
‹›