The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-101090: URL Redirection to Untrusted Site9.8 Critical9.3 Critical0%Sep 27, 2026
CVE-2026-101086: Improper Privilege Management6.5 Medium7.1 High0%Sep 27, 2026
CVE-2026-101084: Authorization Bypass Through User-Controlled Key9.6 Critical9.3 Critical0%Sep 27, 2026
CVE-2026-101062: Incorrect Authorization8.8 High8.7 High0%Sep 27, 2026
CVE-2026-100879: Missing Authorization4.3 Medium2.1 Low0%Sep 27, 2026
CVE-2026-100878: Authorization Bypass Through User-Controlled Key6.3 Medium2.1 Low0%Sep 27, 2026
CVE-2026-101042: Improper Authentication6.4 Medium7.4 High0%Sep 27, 2026
CVE-2026-92995: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Sep 27, 2026
CVE-2026-100860: Not Failing Securely5.5 Medium6.8 Medium0%Sep 27, 2026
CVE-2026-100837: Improper Validation of Unsafe Equivalence in Input3.7 Low6.3 Medium0%Sep 27, 2026
CVE-2026-100834: Authentication Bypass by Capture-replay5.9 Medium8.2 High0%Sep 27, 2026
CVE-2026-100744: Missing Authorization7.3 High5.5 Medium0%Sep 27, 2026
CVE-2026-100724: Inconsistent Interpretation of HTTP Requests5.4 Medium6.3 Medium0%Sep 27, 2026
CVE-2026-100721: Incorrect Authorization9.0 Critical9.5 Critical0%Sep 27, 2026
CVE-2026-78582: Missing Authorization6.5 MediumN/A0%Sep 26, 2026
CVE-2026-72662: Authorization Bypass Through User-Controlled Key6.3 MediumN/A0%Sep 26, 2026
CVE-2026-77203: Improper Privilege Management8.8 HighN/A0%Sep 26, 2026
CVE-2026-100688: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Sep 26, 2026
CVE-2026-100686: Improper Privilege Management8.1 High8.6 High0%Sep 26, 2026
CVE-2026-100681: Server-Side Request Forgery (SSRF)5.4 Medium6.3 Medium0%Sep 26, 2026
CVE-2026-100646: Origin Validation Error8.1 High8.6 High0%Sep 26, 2026
CVE-2026-100641: Improper Neutralization of Input During Web Page Generation8.0 High8.6 High1%Sep 26, 2026
CVE-2026-100640: Exposure of Sensitive Information to an Unauthorized Actor4.7 Medium8.6 High0%Sep 26, 2026
CVE-2026-100629: Incorrect Authorization5.5 Medium7.0 High0%Sep 26, 2026
CVE-2026-100627: Authorization Bypass Through User-Controlled Key8.1 High7.2 High0%Sep 26, 2026
1351-1375 of 12078
‹›