The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-85538: Incorrect AuthorizationN/A8.3 High0%Sep 4, 2026
CVE-2026-85533: Missing AuthorizationN/A7.6 High0%Sep 4, 2026
CVE-2026-85311: Missing Authorization5.3 MediumN/A0%Sep 4, 2026
CVE-2026-32480: Missing Authorization5.3 MediumN/A0%Sep 4, 2026
CVE-2026-27432: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Sep 4, 2026
CVE-2026-85381: Authorization Bypass Through User-Controlled Key5.3 Medium5.5 Medium1%Sep 4, 2026
CVE-2026-67398: Missing AuthorizationN/A8.2 High0%Sep 4, 2026
CVE-2026-85451: Use of Hard-coded Credentials7.1 High7.1 High0%Sep 3, 2026
CVE-2026-85378: Authorization Bypass Through User-Controlled Key7.3 High5.5 Medium1%Sep 3, 2026
CVE-2026-85241: Improper Authorization6.3 Medium5.3 Medium0%Sep 3, 2026
CVE-2026-69857: Authorization Bypass Through User-Controlled Key8.5 HighN/A1%Sep 3, 2026
CVE-2026-83711: Authorization Bypass Through User-Controlled Key10.0 CriticalN/A1%Sep 3, 2026
CVE-2026-70178: Missing Authorization8.5 HighN/A1%Sep 3, 2026
CVE-2026-84185: Improper Verification of Cryptographic Signature5.9 MediumN/A0%Sep 3, 2026
CVE-2026-63376: Improperly Controlled Modification of Object Prototype Attributes8.2 HighN/A1%Sep 3, 2026
CVE-2026-53728: URL Redirection to Untrusted Site7.1 HighN/A0%Sep 3, 2026
CVE-2026-85395: Missing Authorization7.1 High7.1 High0%Sep 3, 2026
CVE-2026-85392: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Sep 3, 2026
CVE-2026-82302: Incorrect Authorization8.1 HighN/A0%Sep 3, 2026
CVE-2026-82299: Incorrect Authorization6.5 MediumN/A0%Sep 3, 2026
CVE-2026-82298: Incorrect Authorization4.3 MediumN/A0%Sep 3, 2026
CVE-2026-78596: Missing Authorization4.3 MediumN/A0%Sep 3, 2026
CVE-2026-78595: Missing Authorization4.3 MediumN/A0%Sep 3, 2026
CVE-2026-78583: Incorrect Authorization8.1 HighN/A0%Sep 3, 2026
CVE-2026-82023: Incorrect Authorization4.3 Medium5.3 Medium0%Sep 3, 2026
2201-2225 of 12121
‹›