The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-62987: Authentication Bypass by Spoofing5.8 MediumN/A0%Sep 21, 2026
CVE-2026-86473: Insufficient Session Expiration9.1 CriticalN/A0%Sep 21, 2026
CVE-2026-82355: Session Fixation4.2 MediumN/A0%Sep 21, 2026
CVE-2026-55060: Incorrect Authorization3.7 LowN/A0%Sep 21, 2026
CVE-2026-52740: Incorrect AuthorizationN/A5.3 Medium1%Sep 21, 2026
CVE-2025-71420: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Sep 21, 2026
CVE-2026-94374: Authorization Bypass Through User-Controlled KeyN/A8.3 High0%Sep 21, 2026
CVE-2026-89139: Improper Neutralization of Special Elements used in an OS CommandN/A8.7 High0%Sep 21, 2026
CVE-2026-87858: Reliance on Untrusted Inputs in a Security DecisionN/A7.2 High0%Sep 21, 2026
CVE-2026-94152: Authorization Bypass Through User-Controlled Key4.3 Medium2.1 Low0%Sep 21, 2026
CVE-2026-94217: Missing Authorization3.5 LowN/A0%Sep 21, 2026
CVE-2026-94213: Missing Authorization4.9 MediumN/A0%Sep 21, 2026
CVE-2026-92254: Improper Input ValidationN/A6.9 Medium0%Sep 20, 2026
CVE-2026-94113: Missing Authorization6.5 Medium7.1 High0%Sep 20, 2026
CVE-2026-94112: Authentication Bypass by Capture-replay6.8 Medium7.6 High0%Sep 20, 2026
CVE-2026-93961: Improper Authorization5.3 Medium6.9 Medium0%Sep 20, 2026
CVE-2026-93991: Authorization Bypass Through User-Controlled Key7.7 High8.3 High0%Sep 19, 2026
CVE-2026-93955: Authorization Bypass Through User-Controlled Key4.3 Medium2.1 Low0%Sep 19, 2026
CVE-2026-93954: Incorrect Authorization4.3 Medium2.1 Low0%Sep 19, 2026
CVE-2026-9858: Missing Authorization4.3 MediumN/A0%Sep 19, 2026
CVE-2026-9766: Missing Authorization4.3 MediumN/A0%Sep 19, 2026
CVE-2026-9613: Missing Authorization4.3 MediumN/A0%Sep 19, 2026
CVE-2026-1256: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 19, 2026
CVE-2026-18346: Missing Authorization5.3 MediumN/A0%Sep 19, 2026
CVE-2026-9832: Improper Verification of Cryptographic Signature5.3 MediumN/A0%Sep 19, 2026
1576-1600 of 12096
‹›