The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-77246: Improper Limitation of a Pathname to a Restricted Directory8.6 HighN/A0%Sep 22, 2026
CVE-2026-75745: Incorrect Authorization10.0 CriticalN/A1%Sep 22, 2026
CVE-2026-94384: Missing Authorization8.1 High6.4 Medium0%Sep 22, 2026
CVE-2026-75728: Incorrect Authorization9.1 CriticalN/A1%Sep 22, 2026
CVE-2026-75723: Incorrect Authorization10.0 CriticalN/A1%Sep 22, 2026
CVE-2026-43643: Missing Authorization7.5 High8.7 High1%Sep 22, 2026
CVE-2026-94456: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)9.1 CriticalN/A1%Sep 22, 2026
CVE-2026-95805: Improper AuthorizationN/A5.3 Medium0%Sep 22, 2026
CVE-2026-95654: Incorrect Authorization7.4 High9.1 Critical1%Sep 22, 2026
CVE-2026-90462: Improper Handling of Insufficient Permissions or Privileges5.4 MediumN/A0%Sep 22, 2026
CVE-2026-77637: Missing Authorization3.8 LowN/A0%Sep 22, 2026
CVE-2026-77621: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.3 Critical1%Sep 22, 2026
CVE-2026-75607: Missing Authorization8.1 HighN/A1%Sep 22, 2026
CVE-2026-95697: Missing AuthorizationN/A5.3 Medium0%Sep 22, 2026
CVE-2026-95685: Missing AuthorizationN/A5.3 Medium0%Sep 22, 2026
CVE-2026-94127: Heap-based Buffer Overflow9.8 Critical9.3 Critical1%Sep 22, 2026
CVE-2026-93344: Missing Authorization6.5 Medium7.1 High0%Sep 22, 2026
CVE-2026-95671: Missing AuthorizationN/A5.3 Medium0%Sep 22, 2026
CVE-2026-93343: Missing Authorization6.5 Medium7.1 High0%Sep 22, 2026
CVE-2026-93342: Missing Authorization5.4 Medium5.3 Medium0%Sep 22, 2026
CVE-2026-93341: Missing Authorization4.3 Medium5.3 Medium0%Sep 22, 2026
CVE-2026-87119: Authentication Bypass by Capture-replayN/A8.2 High1%Sep 22, 2026
CVE-2026-25254: Improper Authorization9.8 CriticalN/A0%Sep 22, 2026
CVE-2026-91092: Missing Authorization4.3 MediumN/A0%Sep 22, 2026
CVE-2026-6922: Incorrect Authorization7.1 HighN/A0%Sep 22, 2026
1526-1550 of 12096