The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-100629: Incorrect Authorization5.5 Medium7.0 High0%Sep 26, 2026
CVE-2026-100627: Authorization Bypass Through User-Controlled Key8.1 High7.2 High0%Sep 26, 2026
CVE-2026-100626: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Sep 26, 2026
CVE-2026-100618: Authorization Bypass Through User-Controlled Key8.5 High8.7 High0%Sep 26, 2026
CVE-2026-100608: Missing Authorization8.3 High8.7 High0%Sep 26, 2026
CVE-2026-100604: Incorrect Authorization5.4 Medium5.3 Medium0%Sep 26, 2026
CVE-2026-100602: Missing Authorization6.5 Medium7.1 High0%Sep 26, 2026
CVE-2026-96526: Exposure of Sensitive Information to an Unauthorized Actor2.7 LowN/A0%Sep 26, 2026
CVE-2026-11871: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Sep 26, 2026
CVE-2026-100595: Exposure of Sensitive Information to an Unauthorized Actor6.5 Medium7.1 High0%Sep 26, 2026
CVE-2026-100594: Exposure of Sensitive Information to an Unauthorized Actor6.5 Medium7.1 High0%Sep 26, 2026
CVE-2026-100591: Missing Authorization6.3 Medium5.3 Medium0%Sep 26, 2026
CVE-2026-100590: Incorrect Authorization4.3 Medium5.3 Medium0%Sep 26, 2026
CVE-2026-100587: Missing Authorization8.8 High8.7 High0%Sep 26, 2026
CVE-2026-100586: Improper Privilege Management8.8 High8.7 High0%Sep 26, 2026
CVE-2026-100585: Missing Authorization8.0 High8.6 High0%Sep 26, 2026
CVE-2026-100583: Missing Authorization4.3 Medium5.3 Medium0%Sep 26, 2026
CVE-2026-100579: Authorization Bypass Through User-Controlled Key7.6 High7.2 High0%Sep 26, 2026
CVE-2026-100562: Incorrect Authorization5.4 Medium5.3 Medium0%Sep 26, 2026
CVE-2026-100560: Incorrect Authorization7.5 High7.7 High1%Sep 26, 2026
CVE-2026-100559: Improper Neutralization of Special Elements used in an OS Command8.0 High8.6 High0%Sep 26, 2026
CVE-2026-100557: Incorrect Authorization8.3 High8.7 High0%Sep 26, 2026
CVE-2026-100556: Incorrect Authorization6.3 Medium5.3 Medium0%Sep 26, 2026
CVE-2026-100554: Insufficient Session Expiration4.2 Medium2.3 Low0%Sep 26, 2026
CVE-2026-100553: Incorrect Authorization4.3 Medium5.3 Medium0%Sep 26, 2026
1376-1400 of 12080