The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-82461: Improper Verification of Cryptographic Signature8.1 High8.6 High0%Aug 29, 2026
CVE-2026-55678: Improper Access ControlN/A6.9 Medium0%Aug 28, 2026
CVE-2026-19294: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Aug 28, 2026
CVE-2026-82281: Authorization Bypass Through User-Controlled Key7.4 High9.1 Critical0%Aug 28, 2026
CVE-2026-82277: Missing Authentication for Critical Function9.8 Critical9.3 Critical0%Aug 28, 2026
CVE-2026-82274: URL Redirection to Untrusted Site4.7 Medium5.3 Medium0%Aug 28, 2026
CVE-2026-82270: Server-Side Request Forgery (SSRF)7.5 High8.7 High0%Aug 28, 2026
CVE-2026-55834: URL Redirection to Untrusted Site4.3 MediumN/A0%Aug 28, 2026
CVE-2026-55549: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 28, 2026
CVE-2026-55545: Missing Authorization6.5 MediumN/A0%Aug 28, 2026
CVE-2026-55521: Missing Authorization8.8 HighN/A0%Aug 28, 2026
CVE-2026-55064: Missing Authorization4.3 MediumN/A0%Aug 28, 2026
CVE-2026-54745: Improper Access Control10.0 CriticalN/A0%Aug 28, 2026
CVE-2026-56100: Missing Authorization8.1 High8.6 High0%Aug 28, 2026
CVE-2026-62904: Incorrect Authorization5.4 MediumN/A0%Aug 28, 2026
CVE-2026-82247: Insufficiently Protected Credentials7.5 High8.7 High0%Aug 28, 2026
CVE-2026-82245: Missing Authorization8.1 High7.2 High0%Aug 28, 2026
CVE-2026-82242: Missing Authorization7.7 High8.3 High0%Aug 28, 2026
CVE-2026-81732: Exposure of Sensitive Information to an Unauthorized ActorN/A6.9 Medium0%Aug 28, 2026
CVE-2026-6128: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 28, 2026
CVE-2026-40205: Improper Authentication5.9 MediumN/A0%Aug 28, 2026
CVE-2026-18918: Incorrect AuthorizationN/A9.1 Critical0%Aug 28, 2026
CVE-2026-80703: Undefined Security WeaknessN/AN/A0%Aug 28, 2026
CVE-2026-16759: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.5 MediumN/A0%Aug 28, 2026
CVE-2026-75419: Improper Neutralization of CRLF Sequences in HTTP Headers8.8 HighN/A0%Aug 28, 2026
2376-2400 of 12128
‹›