The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-90537: Missing Authorization8.2 High8.8 High0%Sep 12, 2026
CVE-2026-90474: Improper Authentication6.8 Medium7.6 High0%Sep 12, 2026
CVE-2026-87918: Improper Access Control5.3 MediumN/A0%Sep 12, 2026
CVE-2026-87894: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Sep 12, 2026
CVE-2026-87891: Improper Access Control6.5 MediumN/A0%Sep 12, 2026
CVE-2026-87888: Improper Neutralization of Input During Web Page Generation8.0 HighN/A0%Sep 12, 2026
CVE-2026-81742: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Sep 12, 2026
CVE-2026-80494: Files or Directories Accessible to External Parties8.6 HighN/A0%Sep 12, 2026
CVE-2026-90450: Incorrect Authorization4.3 Medium5.3 Medium0%Sep 11, 2026
CVE-2026-90447: Authentication Bypass by Spoofing6.5 Medium7.1 High0%Sep 11, 2026
CVE-2026-49992: Cross-Site Request Forgery (CSRF)N/A6.3 Medium0%Sep 11, 2026
CVE-2026-68535: Missing Authorization4.3 Medium5.1 Medium0%Sep 11, 2026
CVE-2026-81916: Missing Authorization4.3 Medium5.1 Medium0%Sep 11, 2026
CVE-2026-81915: Missing Authorization5.3 Medium5.1 Medium0%Sep 11, 2026
CVE-2026-81912: Cross-Site Request Forgery (CSRF)5.7 Medium5.7 Medium0%Sep 11, 2026
CVE-2026-49463: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Sep 11, 2026
CVE-2026-62089: Missing Authorization7.1 HighN/A0%Sep 11, 2026
CVE-2026-54072: URL Redirection to Untrusted Site9.3 CriticalN/A0%Sep 11, 2026
CVE-2026-82535: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Sep 11, 2026
CVE-2026-81909: Missing AuthorizationN/A5.9 Medium0%Sep 11, 2026
CVE-2026-81908: Missing AuthorizationN/A6.0 Medium0%Sep 11, 2026
CVE-2026-18122: Missing AuthorizationN/A6.0 Medium0%Sep 11, 2026
CVE-2026-72709: Missing Authorization9.8 Critical9.3 Critical0%Sep 11, 2026
CVE-2026-8304: Missing Authorization5.5 MediumN/A0%Sep 11, 2026
CVE-2026-89265: Missing Authorization4.3 Medium5.3 Medium0%Sep 11, 2026
1901-1925 of 12115
‹›