The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-91739: Missing Authorization4.2 MediumN/A0%Sep 15, 2026
CVE-2026-91735: Incorrect Authorization8.3 HighN/A0%Sep 15, 2026
CVE-2026-91734: Incorrect Authorization7.4 HighN/A0%Sep 15, 2026
CVE-2026-91732: Missing Authorization8.1 HighN/A0%Sep 15, 2026
CVE-2026-91717: Missing Authorization5.1 MediumN/A0%Sep 15, 2026
CVE-2026-91713: Missing Authorization4.2 MediumN/A0%Sep 15, 2026
CVE-2026-88065: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Sep 15, 2026
CVE-2026-66887: Missing Authorization9.6 Critical9.4 Critical0%Sep 15, 2026
CVE-2026-69206: Authentication Bypass by Capture-replay5.9 MediumN/A0%Sep 15, 2026
CVE-2026-18422: Missing Authorization6.5 Medium2.1 Low0%Sep 15, 2026
CVE-2026-81922: Missing Authorization2.7 Low2.1 Low0%Sep 15, 2026
CVE-2026-81919: Cross-Site Request Forgery (CSRF)4.3 Medium2.3 Low0%Sep 15, 2026
CVE-2026-69212: Exposure of Sensitive Information to an Unauthorized Actor5.9 MediumN/A0%Sep 15, 2026
CVE-2026-68530: Missing AuthorizationN/A2.1 Low0%Sep 15, 2026
CVE-2026-68529: Missing AuthorizationN/A2.1 Low0%Sep 15, 2026
CVE-2026-18421: Missing AuthorizationN/A2.1 Low0%Sep 15, 2026
CVE-2026-82837: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Sep 15, 2026
CVE-2026-56830: Missing Authorization6.5 MediumN/A0%Sep 15, 2026
CVE-2026-56829: Missing Authorization8.1 HighN/A1%Sep 15, 2026
CVE-2026-56827: Missing Authorization8.1 HighN/A1%Sep 15, 2026
CVE-2026-56825: Missing Authorization8.1 HighN/A1%Sep 15, 2026
CVE-2026-55375: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Sep 15, 2026
CVE-2026-54549: Server-Side Request Forgery (SSRF)8.3 HighN/A0%Sep 15, 2026
CVE-2026-12742: Missing Authorization5.4 MediumN/A0%Sep 15, 2026
CVE-2026-59160: Missing Authentication for Critical Function8.8 HighN/A0%Sep 15, 2026
1751-1775 of 12104
‹›