The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-19816: Incorrect Authorization7.1 HighN/A0%Sep 14, 2026
CVE-2026-16190: Missing Authorization3.1 LowN/A0%Sep 14, 2026
CVE-2026-90810: Improper Authorization6.3 Medium2.1 Low0%Sep 14, 2026
CVE-2026-89023: Missing Authorization8.6 High8.8 High0%Sep 14, 2026
CVE-2026-82519: Missing Authorization4.3 Medium2.3 Low0%Sep 14, 2026
CVE-2026-90806: Missing Authorization6.3 Medium5.3 Medium0%Sep 14, 2026
CVE-2026-73494: Inconsistent Interpretation of HTTP Requests7.4 HighN/A1%Sep 14, 2026
CVE-2026-57578: Missing AuthorizationN/A9.2 Critical1%Sep 14, 2026
CVE-2026-57570: Missing Authorization6.5 MediumN/A0%Sep 14, 2026
CVE-2026-55866: Incorrect Authorization3.7 LowN/A0%Sep 14, 2026
CVE-2026-54180: Authorization Bypass Through User-Controlled Key7.6 HighN/A0%Sep 14, 2026
CVE-2026-50157: Use of GET Request Method With Sensitive Query Strings6.5 MediumN/A1%Sep 14, 2026
CVE-2026-57579: Missing Authorization7.5 HighN/A1%Sep 14, 2026
CVE-2026-61534: Improperly Controlled Modification of Object Prototype Attributes9.1 CriticalN/A1%Sep 14, 2026
CVE-2026-57131: Improper Control of Generation of Code9.8 CriticalN/A1%Sep 14, 2026
CVE-2026-55236: Improper Authorization5.9 MediumN/A0%Sep 14, 2026
CVE-2026-55235: Improper Authentication5.9 MediumN/A0%Sep 14, 2026
CVE-2026-47701: Exposure of Sensitive Information to an Unauthorized Actor7.7 HighN/A0%Sep 14, 2026
CVE-2026-82433: Insufficiently Protected Credentials6.5 MediumN/A0%Sep 14, 2026
CVE-2026-82432: Incorrect Authorization8.1 HighN/A0%Sep 14, 2026
CVE-2026-90941: Missing Authorization4.3 Medium5.3 Medium0%Sep 14, 2026
CVE-2026-82920: Incorrect Authorization5.5 MediumN/A0%Sep 14, 2026
CVE-2026-73370: Incorrect Authorization9.8 CriticalN/A1%Sep 14, 2026
CVE-2026-73236: Incorrect Authorization7.5 HighN/A0%Sep 14, 2026
CVE-2026-90933: Missing Authorization7.1 High7.1 High0%Sep 14, 2026
1851-1875 of 12115