The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-102846: Improper Authorization4.7 Medium2.0 Low0%Sep 30, 2026
CVE-2026-102844: Authorization Bypass Through User-Controlled Key2.7 Low2.0 Low0%Sep 30, 2026
CVE-2026-103054: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Sep 30, 2026
CVE-2026-90441: Exposure of Sensitive Information to an Unauthorized Actor8.1 High7.1 High0%Sep 30, 2026
CVE-2026-86136: Improper Limitation of a Pathname to a Restricted Directory8.1 High7.1 High0%Sep 30, 2026
CVE-2026-86105: Improper Handling of Unicode Encoding7.1 High6.0 Medium0%Sep 30, 2026
CVE-2026-86101: Improper Authorization6.5 Medium7.2 High0%Sep 30, 2026
CVE-2026-81842: Incorrect Authorization4.3 MediumN/A0%Sep 29, 2026
CVE-2026-81841: Missing Authorization5.3 MediumN/A0%Sep 29, 2026
CVE-2026-79537: Authorization Bypass Through User-Controlled Key9.1 CriticalN/A0%Sep 29, 2026
CVE-2026-79348: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Sep 29, 2026
CVE-2026-61519: Incorrect Authorization8.8 High8.7 High0%Sep 29, 2026
CVE-2026-53989: URL Redirection to Untrusted Site4.7 Medium5.3 Medium0%Sep 29, 2026
CVE-2026-102876: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Sep 29, 2026
CVE-2026-102330: Incorrect Authorization6.5 MediumN/A0%Sep 29, 2026
CVE-2026-102327: Incorrect Authorization7.5 HighN/A0%Sep 29, 2026
CVE-2026-102320: Missing Authorization6.5 MediumN/A0%Sep 29, 2026
CVE-2026-102310: Missing Authorization6.5 MediumN/A0%Sep 29, 2026
CVE-2026-95375: Incorrect Authorization6.3 MediumN/A0%Sep 29, 2026
CVE-2026-95374: Incorrect Authorization6.5 MediumN/A0%Sep 29, 2026
CVE-2026-95371: Missing Authorization5.4 MediumN/A0%Sep 29, 2026
CVE-2026-95368: Incorrect Authorization4.3 MediumN/A0%Sep 29, 2026
CVE-2026-95358: Incorrect Authorization4.4 MediumN/A0%Sep 29, 2026
CVE-2026-95355: Incorrect Authorization8.3 HighN/A0%Sep 29, 2026
CVE-2026-95352: Incorrect Authorization5.4 MediumN/A0%Sep 29, 2026
1251-1275 of 12070
‹›