The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-71899: Incorrect Authorization6.5 MediumN/A0%Sep 29, 2026
CVE-2026-71898: Incorrect Authorization4.3 MediumN/A0%Sep 29, 2026
CVE-2026-71897: Incorrect Authorization4.3 MediumN/A0%Sep 29, 2026
CVE-2026-87748: Missing Authorization8.8 HighN/A0%Sep 29, 2026
CVE-2026-66083: Missing Authentication for Critical Function6.5 MediumN/A0%Sep 29, 2026
CVE-2026-8937: Missing Authorization4.3 MediumN/A0%Sep 29, 2026
CVE-2026-8067: Missing Authorization6.5 MediumN/A0%Sep 29, 2026
CVE-2026-81930: Insufficiently Protected Credentials6.3 MediumN/A0%Sep 29, 2026
CVE-2026-81862: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Sep 29, 2026
CVE-2026-4523: Missing Authorization3.7 LowN/A0%Sep 29, 2026
CVE-2026-10518: Incorrect Authorization4.3 MediumN/A0%Sep 29, 2026
CVE-2026-92142: Missing Authorization8.8 HighN/A1%Sep 29, 2026
CVE-2026-102293: Improper Authorization7.3 High5.5 Medium0%Sep 29, 2026
CVE-2026-102261: Authorization Bypass Through User-Controlled Key5.4 Medium2.1 Low0%Sep 29, 2026
CVE-2026-102249: Missing Authorization7.3 High5.5 Medium0%Sep 29, 2026
CVE-2026-102373: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Sep 29, 2026
CVE-2026-102366: Unrestricted Upload of File with Dangerous Type4.4 Medium2.1 Low0%Sep 29, 2026
CVE-2026-102365: Missing Authorization6.5 Medium7.1 High0%Sep 29, 2026
CVE-2026-102362: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Sep 29, 2026
CVE-2026-100392: Incorrect AuthorizationN/A7.0 High0%Sep 28, 2026
CVE-2026-100371: Incorrect AuthorizationN/A8.7 High0%Sep 28, 2026
CVE-2026-101914: Partial String Comparison6.5 MediumN/A0%Sep 28, 2026
CVE-2026-101139: Missing Authorization2.7 Low2.0 Low0%Sep 28, 2026
CVE-2026-101908: Improperly Controlled Modification of Object Prototype AttributesN/A6.9 Medium0%Sep 28, 2026
CVE-2026-101904: Improper Neutralization of Special Elements in Output Used by a Downstream ComponentN/A6.9 Medium0%Sep 28, 2026
1301-1325 of 12070
‹›