The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-84797: Missing Authorization6.3 Medium5.3 Medium0%Sep 2, 2026
CVE-2026-84794: Missing Authorization7.1 High7.1 High0%Sep 2, 2026
CVE-2026-84792: Missing Authorization4.3 Medium5.3 Medium0%Sep 2, 2026
CVE-2026-84217: Missing Authorization5.4 MediumN/A0%Sep 2, 2026
CVE-2026-82958: Improper Neutralization of Special Elements Used in a Template EngineN/A7.6 High0%Sep 2, 2026
CVE-2026-81199: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Sep 2, 2026
CVE-2026-81195: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Sep 2, 2026
CVE-2026-81194: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Sep 2, 2026
CVE-2026-78151: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Sep 2, 2026
CVE-2026-16966: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Sep 2, 2026
CVE-2026-15232: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Sep 2, 2026
CVE-2026-14357: Missing Authorization8.8 HighN/A1%Sep 2, 2026
CVE-2026-84355: Incorrect Authorization3.1 LowN/A0%Sep 2, 2026
CVE-2026-84354: Incorrect Authorization9.6 CriticalN/A0%Sep 2, 2026
CVE-2026-84335: Incorrect Authorization8.3 HighN/A0%Sep 2, 2026
CVE-2026-84334: Incorrect Authorization8.1 HighN/A0%Sep 2, 2026
CVE-2026-84332: Incorrect Authorization6.5 MediumN/A0%Sep 2, 2026
CVE-2026-84331: Incorrect Authorization3.1 LowN/A0%Sep 2, 2026
CVE-2026-84328: Missing Authorization3.1 LowN/A0%Sep 2, 2026
CVE-2026-84327: Incorrect Authorization6.5 MediumN/A0%Sep 2, 2026
CVE-2026-84323: Missing Authorization5.3 MediumN/A0%Sep 2, 2026
CVE-2026-84366: Cleartext Transmission of Sensitive Information7.4 HighN/A0%Sep 1, 2026
CVE-2026-63435: Interpretation Conflict5.3 MediumN/A0%Sep 1, 2026
CVE-2026-78608: Missing Authorization6.5 MediumN/A0%Sep 1, 2026
CVE-2026-78607: Missing Authorization7.1 HighN/A0%Sep 1, 2026
2276-2300 of 12125