The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-82746: Missing AuthorizationN/A5.9 Medium0%Sep 1, 2026
CVE-2026-82741: Improper Validation of Specified Type of InputN/A2.1 Low0%Sep 1, 2026
CVE-2026-82730: Incorrect AuthorizationN/A8.2 High0%Sep 1, 2026
CVE-2026-75865: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Sep 1, 2026
CVE-2026-82882: Missing Authorization8.8 High8.7 High0%Aug 31, 2026
CVE-2026-81892: Authorization Bypass Through User-Controlled Key8.1 HighN/A0%Aug 31, 2026
CVE-2026-81887: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium1%Aug 31, 2026
CVE-2026-81278: Missing Authorization5.4 MediumN/A0%Aug 31, 2026
CVE-2026-79483: Improper Neutralization of Special Elements in Data Query Logic5.3 MediumN/A0%Aug 31, 2026
CVE-2026-71415: Missing AuthorizationN/A7.1 High0%Aug 31, 2026
CVE-2026-54599: Cross-Site Request Forgery (CSRF)N/A7.5 High0%Aug 31, 2026
CVE-2026-52730: Missing Authorization4.3 MediumN/A0%Aug 31, 2026
CVE-2026-82816: Authorization Bypass Through User-Controlled Key6.3 Medium2.1 Low0%Aug 31, 2026
CVE-2026-79748: Missing Authorization9.9 CriticalN/A1%Aug 31, 2026
CVE-2026-79744: Improper Privilege Management8.8 HighN/A1%Aug 31, 2026
CVE-2026-78422: Function Call With Incorrect Argument TypeN/A7.3 High0%Aug 31, 2026
CVE-2026-78076: Improper Access ControlN/A5.1 Medium0%Aug 31, 2026
CVE-2026-78075: Authorization Bypass Through User-Controlled KeyN/A5.1 Medium0%Aug 31, 2026
CVE-2026-19616: Missing Authorization7.5 HighN/A0%Aug 31, 2026
CVE-2026-74010: Missing Authorization5.3 MediumN/A0%Aug 31, 2026
CVE-2026-82878: Missing Authorization6.3 Medium5.3 Medium0%Aug 31, 2026
CVE-2026-82875: Incorrect Authorization5.5 Medium5.1 Medium0%Aug 31, 2026
CVE-2026-82873: Authorization Bypass Through User-Controlled Key5.0 Medium5.3 Medium0%Aug 31, 2026
CVE-2026-19410: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A9.4 Critical0%Aug 31, 2026
CVE-2026-68951: Incorrect Authorization5.3 Medium6.9 Medium0%Aug 31, 2026
2326-2350 of 12127
‹›