The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-80343: Improper Handling of Case Sensitivity8.2 HighN/A0%Oct 19, 2026
CVE-2026-80312: Improper Authentication8.2 HighN/A1%Oct 19, 2026
CVE-2026-79633: Exposure of Sensitive Information Through Data QueriesN/AN/A0%Oct 19, 2026
CVE-2026-79620: Exposure of Sensitive Information Through Data QueriesN/AN/A0%Oct 19, 2026
CVE-2026-71563: Missing Authorization4.3 MediumN/A0%Oct 19, 2026
CVE-2026-68482: Missing AuthorizationN/AN/A0%Oct 19, 2026
CVE-2026-108766: Undefined Security WeaknessN/AN/A0%Oct 19, 2026
CVE-2026-112178: Missing AuthorizationN/A7.1 High0%Oct 19, 2026
CVE-2026-91046: Improper Access Control4.3 MediumN/A0%Oct 19, 2026
CVE-2026-106028: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-112045: Improper Authorization5.4 Medium2.1 Low0%Oct 19, 2026
CVE-2026-112043: Authorization Bypass Through User-Controlled Key6.3 Medium5.3 Medium0%Oct 19, 2026
CVE-2026-103091: Missing AuthorizationN/A9.3 Critical0%Oct 19, 2026
CVE-2026-102503: Missing Authentication for Critical FunctionN/A9.3 Critical0%Oct 19, 2026
CVE-2026-112050: Cross-Site Request Forgery (CSRF)3.1 Low2.3 Low0%Oct 18, 2026
CVE-2026-112047: Incorrect Authorization5.4 Medium5.3 Medium0%Oct 18, 2026
CVE-2026-112004: Authorization Bypass Through User-Controlled Key3.1 Low2.3 Low0%Oct 18, 2026
CVE-2026-112001: Incorrect Authorization7.2 High8.6 High0%Oct 18, 2026
CVE-2026-112000: Missing Authorization7.6 High7.2 High0%Oct 18, 2026
CVE-2026-110880: Missing Authorization6.5 MediumN/A0%Oct 18, 2026
CVE-2026-110383: Authorization Bypass Through User-Controlled Key7.5 HighN/A0%Oct 18, 2026
CVE-2026-110365: Missing Authorization6.5 MediumN/A0%Oct 18, 2026
CVE-2026-111875: Missing Authorization4.7 Medium2.0 Low0%Oct 18, 2026
CVE-2026-111930: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111929: Incorrect Authorization5.3 Medium6.0 Medium0%Oct 17, 2026
251-275 of 12117
‹›