The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-7487: Access Control Check Implemented After Asset is Accessed3.5 LowN/A0%Aug 26, 2026
CVE-2026-3035: Authentication Bypass Using an Alternate Path or Channel5.5 MediumN/A0%Aug 26, 2026
CVE-2026-79619: Incorrect AuthorizationN/A7.3 High0%Aug 26, 2026
CVE-2026-63041: Reliance on Untrusted Inputs in a Security Decision8.8 High5.3 Medium0%Aug 26, 2026
CVE-2026-3235: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Aug 26, 2026
CVE-2026-80348: Missing Authorization8.8 High8.7 High1%Aug 26, 2026
CVE-2026-75977: Improper Privilege Management8.8 HighN/A1%Aug 26, 2026
CVE-2026-18431: Missing Authorization9.8 CriticalN/A1%Aug 26, 2026
CVE-2026-79654: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Aug 26, 2026
CVE-2026-16984: Improper Access Control6.5 MediumN/A0%Aug 26, 2026
CVE-2026-14550: Missing Authorization5.3 MediumN/A0%Aug 26, 2026
CVE-2026-80197: Authorization Bypass Through User-Controlled Key4.3 Medium8.7 High0%Aug 26, 2026
CVE-2026-80195: Improper Enforcement of Behavioral Workflow5.4 Medium8.7 High0%Aug 26, 2026
CVE-2026-80194: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium8.7 High0%Aug 26, 2026
CVE-2026-80193: Missing Authorization8.8 High8.7 High0%Aug 26, 2026
CVE-2026-73335: Improper Authorization in Handler for Custom URL Scheme5.3 Medium4.6 Medium0%Aug 26, 2026
CVE-2026-18985: Incorrect Authorization8.1 HighN/A0%Aug 25, 2026
CVE-2026-16645: Missing Authorization9.1 CriticalN/A0%Aug 25, 2026
CVE-2026-16644: Incorrect Authorization9.1 CriticalN/A0%Aug 25, 2026
CVE-2026-15916: Missing Authorization4.2 MediumN/A0%Aug 25, 2026
CVE-2026-68525: Incorrect Authorization9.1 CriticalN/A0%Aug 25, 2026
CVE-2026-66422: Improper Authorization8.1 HighN/A0%Aug 25, 2026
CVE-2026-65182: Improper Access Control9.1 CriticalN/A0%Aug 25, 2026
CVE-2026-79286: Missing Authorization7.4 HighN/A0%Aug 25, 2026
CVE-2026-79262: Incorrect Authorization4.3 MediumN/A0%Aug 25, 2026
2426-2450 of 12128
‹›