The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-19939: Expired Pointer Dereference6.3 MediumN/A0%Oct 13, 2026
CVE-2026-110131: Missing Authorization5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-110129: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-110126: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110125: Authorization Bypass Through User-Controlled Key6.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110124: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Oct 13, 2026
CVE-2026-110121: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-110120: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110119: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Oct 13, 2026
CVE-2026-110116: Improper Limitation of a Pathname to a Restricted Directory9.1 Critical8.8 High1%Oct 13, 2026
CVE-2026-110115: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High0%Oct 13, 2026
CVE-2026-110114: Missing Authentication for Critical Function6.5 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-110109: Missing Authorization6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-110108: Missing Authorization8.1 High8.6 High0%Oct 13, 2026
CVE-2026-110107: Authorization Bypass Through User-Controlled Key4.2 Medium2.3 Low0%Oct 13, 2026
CVE-2026-110104: Use of Password Hash With Insufficient Computational Effort5.9 Medium8.2 High0%Oct 13, 2026
CVE-2026-110103: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 13, 2026
CVE-2026-110102: Download of Code Without Integrity Check7.5 High7.7 High0%Oct 13, 2026
CVE-2026-110099: Missing Authorization4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110098: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110097: Improper Authentication8.1 High8.6 High0%Oct 13, 2026
CVE-2026-10759: Improper Neutralization of Special Elements used in an LDAP Query5.5 MediumN/A0%Oct 13, 2026
CVE-2026-109898: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-109896: Missing Authorization4.3 MediumN/A0%Oct 13, 2026
CVE-2026-109890: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
2726-2750 of 444579