The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-83941: Missing Authorization9.9 CriticalN/A1%Sep 8, 2026
CVE-2026-86840: Authorization Bypass Through User-Controlled Key9.1 CriticalN/A0%Sep 8, 2026
CVE-2026-86737: Missing Authorization4.3 Medium5.3 Medium0%Sep 8, 2026
CVE-2026-86725: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Sep 8, 2026
CVE-2026-86721: Improper Authentication7.5 High8.7 High0%Sep 8, 2026
CVE-2026-86665: Missing Authorization7.3 High5.5 Medium0%Sep 8, 2026
CVE-2026-18851: Missing Authorization8.8 HighN/A1%Sep 8, 2026
CVE-2026-12647: Missing Authorization8.8 HighN/A1%Sep 8, 2026
CVE-2026-12646: Missing Authorization8.8 HighN/A1%Sep 8, 2026
CVE-2026-12645: Missing Authorization8.8 HighN/A1%Sep 8, 2026
CVE-2026-73318: Incorrect Authorization3.8 Low5.1 Medium0%Sep 8, 2026
CVE-2026-73317: Incorrect Authorization2.7 Low5.1 Medium0%Sep 8, 2026
CVE-2026-73311: Authentication Bypass by Capture-replay7.4 High9.1 Critical0%Sep 8, 2026
CVE-2026-73310: Incorrect Authorization5.9 Medium8.2 High0%Sep 8, 2026
CVE-2026-73309: Incorrect Comparison9.1 Critical9.1 Critical0%Sep 8, 2026
CVE-2026-77106: Missing Authorization8.8 High7.7 High0%Sep 8, 2026
CVE-2026-77103: Authentication Bypass Using an Alternate Path or Channel7.5 High8.7 High0%Sep 8, 2026
CVE-2026-17509: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Sep 8, 2026
CVE-2026-77132: Missing AuthorizationN/A5.3 Medium0%Sep 8, 2026
CVE-2026-62650: Authentication Bypass Using an Alternate Path or Channel8.8 High8.7 High0%Sep 8, 2026
CVE-2026-81790: Missing Authorization7.5 HighN/A0%Sep 8, 2026
CVE-2026-81781: Missing Authorization7.1 HighN/A0%Sep 8, 2026
CVE-2026-76963: Missing Authorization4.3 MediumN/A0%Sep 8, 2026
CVE-2026-76962: Missing Authorization4.3 MediumN/A0%Sep 8, 2026
CVE-2026-86544: Incorrect Authorization8.1 High7.2 High0%Sep 7, 2026
2101-2125 of 12117