The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-76143: Missing AuthorizationN/A7.3 High0%Oct 1, 2026
CVE-2026-92245: Missing Authorization7.5 HighN/A0%Oct 1, 2026
CVE-2026-103532: Improper Authorization5.3 Medium6.9 Medium0%Oct 1, 2026
CVE-2026-102139: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Sep 30, 2026
CVE-2026-101880: Incorrect Authorization8.8 High8.7 High1%Sep 30, 2026
CVE-2026-101879: Missing Authorization6.5 Medium7.1 High0%Sep 30, 2026
CVE-2026-103476: Authorization Bypass Through User-Controlled Key5.3 Medium6.9 Medium0%Sep 30, 2026
CVE-2026-103446: Authorization Bypass Through User-Controlled KeyN/A7.4 High0%Sep 30, 2026
CVE-2026-102375: Missing Authorization6.5 MediumN/A0%Sep 30, 2026
CVE-2026-55181: Improper Access Control9.4 CriticalN/A1%Sep 30, 2026
CVE-2026-103233: Authorization Bypass Through User-Controlled Key6.3 Medium2.1 Low0%Sep 30, 2026
CVE-2026-47604: Missing Authorization5.5 MediumN/A0%Sep 30, 2026
CVE-2026-47603: Missing Authorization5.5 MediumN/A0%Sep 30, 2026
CVE-2026-47591: Incorrect Authorization7.8 HighN/A0%Sep 30, 2026
CVE-2026-47580: Missing Authorization7.3 HighN/A0%Sep 30, 2026
CVE-2026-47571: Incorrect Authorization7.8 HighN/A0%Sep 30, 2026
CVE-2026-47552: Missing Authorization7.8 HighN/A0%Sep 30, 2026
CVE-2026-97259: Authorization Bypass Through User-Controlled KeyN/A5.3 Medium0%Sep 30, 2026
CVE-2026-103396: Incorrect Authorization4.3 Medium5.3 Medium0%Sep 30, 2026
CVE-2026-93547: Improper AuthorizationN/A5.3 Medium0%Sep 30, 2026
CVE-2026-96342: Missing AuthorizationN/A6.9 Medium0%Sep 30, 2026
CVE-2026-13720: Improper Authorization5.4 MediumN/A0%Sep 30, 2026
CVE-2026-102588: Origin Validation Error6.5 MediumN/A0%Sep 30, 2026
CVE-2026-102585: Placement of User into Incorrect Group4.3 MediumN/A0%Sep 30, 2026
CVE-2026-80333: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Sep 30, 2026
1226-1250 of 12070