The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-59160: Missing Authentication for Critical Function8.8 HighN/A0%Sep 15, 2026
CVE-2026-58200: Improper Verification of Cryptographic Signature7.1 HighN/A0%Sep 15, 2026
CVE-2026-21587: Improper AuthorizationN/A7.1 High0%Sep 15, 2026
CVE-2026-21586: Improper AuthorizationN/A7.1 High0%Sep 15, 2026
CVE-2026-18110: Missing Authorization7.5 High8.7 High0%Sep 15, 2026
CVE-2026-91983: Incorrect Authorization4.3 Medium5.3 Medium0%Sep 15, 2026
CVE-2026-91933: Authorization Bypass Through User-Controlled Key7.1 High7.6 High0%Sep 15, 2026
CVE-2026-91929: Missing Authorization7.1 High7.6 High0%Sep 15, 2026
CVE-2026-88620: Missing Authorization4.3 MediumN/A0%Sep 15, 2026
CVE-2026-88619: Missing Authorization8.1 HighN/A0%Sep 15, 2026
CVE-2026-87792: Missing AuthorizationN/A8.7 High0%Sep 15, 2026
CVE-2026-65831: Improper Privilege Management7.7 HighN/A1%Sep 15, 2026
CVE-2026-55864: Server-Side Request Forgery (SSRF)N/A7.8 High1%Sep 15, 2026
CVE-2026-54076: Missing Authorization8.1 HighN/A1%Sep 15, 2026
CVE-2026-88617: Incorrect Authorization9.8 CriticalN/A0%Sep 15, 2026
CVE-2026-61549: Improper Privilege ManagementN/A9.0 Critical0%Sep 15, 2026
CVE-2026-54254: Improper Input ValidationN/A5.9 Medium1%Sep 15, 2026
CVE-2026-53966: Missing AuthorizationN/A7.1 High1%Sep 15, 2026
CVE-2026-53957: Server-Side Request Forgery (SSRF)7.7 HighN/A0%Sep 15, 2026
CVE-2026-16140: Incorrect Authorization8.8 HighN/A0%Sep 15, 2026
CVE-2026-91998: Incorrect Authorization9.9 Critical9.4 Critical1%Sep 15, 2026
CVE-2026-91924: Missing Authorization8.5 High8.4 High0%Sep 15, 2026
CVE-2026-57139: Missing Authentication for Critical Function9.8 CriticalN/A1%Sep 15, 2026
CVE-2026-57134: Improper Authentication8.2 HighN/A0%Sep 15, 2026
CVE-2026-52825: Improper AuthorizationN/A5.3 Medium0%Sep 15, 2026
1776-1800 of 12105
‹›