The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-77321: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Sep 24, 2026
CVE-2026-56792: Improper Authentication4.4 MediumN/A0%Sep 24, 2026
CVE-2026-61604: Improper AuthorizationN/A9.3 Critical0%Sep 24, 2026
CVE-2026-94609: Improper Privilege Management8.8 HighN/A1%Sep 24, 2026
CVE-2026-79758: Improper Access Control5.4 MediumN/A0%Sep 24, 2026
CVE-2026-56739: Server-Side Request Forgery (SSRF)N/A8.5 High0%Sep 24, 2026
CVE-2026-65422: Missing Authorization6.5 MediumN/A0%Sep 24, 2026
CVE-2026-51995: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Sep 24, 2026
CVE-2026-97360: Missing Authorization10.0 Critical10.0 Critical0%Sep 24, 2026
CVE-2026-97359: Improper Neutralization of Special Elements Used in a Template Engine10.0 Critical10.0 Critical1%Sep 24, 2026
CVE-2026-97061: Missing Authorization4.3 Medium5.3 Medium0%Sep 24, 2026
CVE-2026-96515: Missing AuthorizationN/A8.6 High0%Sep 24, 2026
CVE-2026-94416: Authentication Bypass by Spoofing6.8 MediumN/A0%Sep 24, 2026
CVE-2026-88916: Incorrect Authorization6.8 MediumN/A0%Sep 24, 2026
CVE-2026-88907: Incorrect Authorization7.4 HighN/A0%Sep 24, 2026
CVE-2026-57590: Incorrect Authorization8.1 HighN/A0%Sep 24, 2026
CVE-2026-78310: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Sep 24, 2026
CVE-2026-97177: Missing Authorization6.6 MediumN/A0%Sep 24, 2026
CVE-2026-89004: Authorization Bypass Through User-Controlled Key2.7 LowN/A0%Sep 24, 2026
CVE-2026-96882: Improper Authorization5.3 Medium5.5 Medium0%Sep 24, 2026
CVE-2026-96881: Improper Authorization5.3 Medium5.5 Medium0%Sep 24, 2026
CVE-2026-96880: Improper Authorization5.3 Medium5.5 Medium0%Sep 24, 2026
CVE-2026-96762: Authorization Bypass Through User-Controlled Key7.3 High5.5 Medium0%Sep 24, 2026
CVE-2026-92874: Incorrect Authorization5.4 MediumN/A0%Sep 24, 2026
CVE-2026-92529: Incorrect Authorization4.3 MediumN/A0%Sep 24, 2026
1451-1475 of 12080