The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-78608: Missing Authorization6.5 MediumN/A0%Sep 1, 2026
CVE-2026-78607: Missing Authorization7.1 HighN/A0%Sep 1, 2026
CVE-2026-78606: Incorrect Authorization4.2 MediumN/A0%Sep 1, 2026
CVE-2026-78603: Missing Authorization4.3 MediumN/A0%Sep 1, 2026
CVE-2026-78597: Missing Authorization4.3 MediumN/A0%Sep 1, 2026
CVE-2026-73723: Incorrect Authorization7.1 HighN/A0%Sep 1, 2026
CVE-2026-73707: Incorrect Authorization8.5 HighN/A0%Sep 1, 2026
CVE-2026-72641: Incorrect Authorization5.4 MediumN/A0%Sep 1, 2026
CVE-2026-72633: Incorrect Authorization4.3 MediumN/A0%Sep 1, 2026
CVE-2026-63137: Incorrect Authorization8.3 HighN/A1%Sep 1, 2026
CVE-2026-81846: Authorization Bypass Through User-Controlled Key3.5 LowN/A0%Sep 1, 2026
CVE-2026-58566: Incorrect Authorization8.8 HighN/A0%Sep 1, 2026
CVE-2026-51956: Improper Access Control8.1 HighN/A0%Sep 1, 2026
CVE-2026-10195: Improper Neutralization of Special Elements used in a Command8.8 HighN/A1%Sep 1, 2026
CVE-2026-84148: Authorization Bypass Through User-Controlled KeyN/A9.2 Critical1%Sep 1, 2026
CVE-2026-84195: Exposure of Sensitive Information to an Unauthorized Actor7.7 High8.3 High0%Sep 1, 2026
CVE-2026-84187: Improper Access Control8.2 High8.8 High1%Sep 1, 2026
CVE-2026-76111: Incorrect Authorization8.8 HighN/A0%Sep 1, 2026
CVE-2026-13611: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Sep 1, 2026
CVE-2026-83743: Authorization Bypass Through User-Controlled Key6.3 Medium2.1 Low0%Sep 1, 2026
CVE-2026-82747: Incorrect AuthorizationN/A5.9 Medium0%Sep 1, 2026
CVE-2026-75921: Incorrect Authorization7.2 HighN/A1%Sep 1, 2026
CVE-2026-19948: Missing Authorization5.3 MediumN/A0%Sep 1, 2026
CVE-2026-82749: Incorrect AuthorizationN/A5.9 Medium0%Sep 1, 2026
CVE-2026-82748: Incorrect AuthorizationN/A2.1 Low0%Sep 1, 2026
2301-2325 of 12127
‹›