The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-85309: Missing Authorization5.3 MediumN/A0%Sep 3, 2026
CVE-2026-85308: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Sep 3, 2026
CVE-2026-85306: Missing Authorization6.5 MediumN/A0%Sep 3, 2026
CVE-2026-85304: Missing Authorization5.3 MediumN/A0%Sep 3, 2026
CVE-2026-50554: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Sep 3, 2026
CVE-2026-85226: Missing Authorization4.3 Medium5.3 Medium0%Sep 3, 2026
CVE-2026-85214: Authorization Bypass Through User-Controlled Key8.1 High7.2 High1%Sep 3, 2026
CVE-2026-85210: Missing Authorization4.3 Medium5.3 Medium0%Sep 3, 2026
CVE-2026-85177: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Sep 3, 2026
CVE-2026-84989: Missing Authorization7.1 HighN/A0%Sep 3, 2026
CVE-2026-80515: Use of Non-Canonical URL Paths for Authorization DecisionsN/A8.9 High0%Sep 3, 2026
CVE-2026-85173: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Sep 3, 2026
CVE-2026-85150: NULL Pointer Dereference7.5 HighN/A1%Sep 3, 2026
CVE-2026-85105: Authorization Bypass Through User-Controlled Key7.3 High6.9 Medium0%Sep 3, 2026
CVE-2026-80254: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Sep 3, 2026
CVE-2026-78069: Missing AuthorizationN/A9.5 Critical0%Sep 3, 2026
CVE-2026-74769: Incorrect Authorization6.5 MediumN/A0%Sep 3, 2026
CVE-2026-84381: Cleartext Transmission of Sensitive Information8.1 HighN/A0%Sep 2, 2026
CVE-2026-77125: Incorrect Authorization7.1 High7.1 High0%Sep 2, 2026
CVE-2026-77122: Incorrect Authorization4.3 Medium5.3 Medium0%Sep 2, 2026
CVE-2026-55221: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Sep 2, 2026
CVE-2026-49249: Uncontrolled Resource ConsumptionN/A7.1 High0%Sep 2, 2026
CVE-2026-84376: Partial String ComparisonN/A6.3 Medium1%Sep 2, 2026
CVE-2026-45730: Missing Authorization8.3 HighN/A0%Sep 2, 2026
CVE-2026-18329: Not Failing Securely8.2 High8.8 High0%Sep 2, 2026
2226-2250 of 12121
‹›