The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-82561: Missing Authorization6.5 Medium5.9 Medium0%Sep 16, 2026
CVE-2026-81866: Missing Authorization4.3 Medium0.5 Low1%Sep 16, 2026
CVE-2026-76423: Authentication Bypass by Spoofing10.0 CriticalN/A1%Sep 16, 2026
CVE-2026-92729: Missing Authentication for Critical Function8.2 High8.8 High1%Sep 16, 2026
CVE-2026-92605: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Sep 16, 2026
CVE-2026-85387: Insufficient Session Expiration7.1 High2.0 Low0%Sep 16, 2026
CVE-2026-92603: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Sep 16, 2026
CVE-2026-92402: Missing Authorization6.3 Medium5.3 Medium0%Sep 16, 2026
CVE-2026-59974: Improper Limitation of a Pathname to a Restricted Directory7.8 HighN/A0%Sep 16, 2026
CVE-2026-92616: Insufficient Session Expiration6.8 Medium7.6 High0%Sep 16, 2026
CVE-2026-92570: Missing Authorization6.5 Medium7.1 High0%Sep 16, 2026
CVE-2026-92567: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Sep 16, 2026
CVE-2026-92087: Improper Authorization8.1 HighN/A0%Sep 16, 2026
CVE-2026-84860: Authorization Bypass Through User-Controlled Key8.8 HighN/A0%Sep 16, 2026
CVE-2026-84858: Improper Control of Generation of Code8.8 HighN/A1%Sep 16, 2026
CVE-2026-63127: Insufficient Verification of Data Authenticity8.2 HighN/A0%Sep 16, 2026
CVE-2026-61709: Improper Preservation of Permissions5.3 MediumN/A0%Sep 16, 2026
CVE-2026-92469: Authorization Bypass Through User-Controlled Key8.1 High7.2 High1%Sep 16, 2026
CVE-2026-92468: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Sep 16, 2026
CVE-2026-92466: Missing Authorization8.8 High8.7 High1%Sep 16, 2026
CVE-2026-92138: Insufficient Verification of Data Authenticity4.2 MediumN/A0%Sep 16, 2026
CVE-2026-61598: Improperly Controlled Modification of Dynamically-Determined Object AttributesN/A7.1 High0%Sep 16, 2026
CVE-2026-92463: Missing Authorization6.5 Medium7.1 High0%Sep 16, 2026
CVE-2026-92462: Missing Authorization6.5 Medium7.1 High0%Sep 16, 2026
CVE-2026-92461: Missing Authorization4.3 Medium5.3 Medium0%Sep 16, 2026
1701-1725 of 12097
‹›