The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-110494: Authorization Bypass Through User-Controlled Key6.3 MediumN/A0%Oct 18, 2026
CVE-2026-110324: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 18, 2026
CVE-2026-110311: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Oct 18, 2026
CVE-2026-109844: Missing Authorization4.3 MediumN/A0%Oct 18, 2026
CVE-2026-109553: Undefined Security Weakness7.5 HighN/A0%Oct 18, 2026
CVE-2026-107686: Undefined Security Weakness4.3 MediumN/A0%Oct 18, 2026
CVE-2026-107618: Undefined Security WeaknessN/AN/A0%Oct 18, 2026
CVE-2026-105964: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Oct 18, 2026
CVE-2026-105661: Uncaught Exception5.3 MediumN/A0%Oct 18, 2026
CVE-2026-104627: Improper Authentication5.4 MediumN/A0%Oct 18, 2026
CVE-2024-4457: WSO2: The Management Console fails to properly validate input related to the configuration of JDBC user stores9.1 CriticalN/A0%Oct 18, 2026
CVE-2026-111993: Cleartext Storage of Sensitive Information3.3 Low1.9 Low0%Oct 18, 2026
CVE-2026-111992: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Oct 18, 2026
CVE-2026-98868: Undefined Security WeaknessN/AN/A0%Oct 18, 2026
CVE-2026-98867: Undefined Security WeaknessN/AN/A0%Oct 18, 2026
CVE-2026-98866: Undefined Security WeaknessN/AN/A0%Oct 18, 2026
CVE-2026-98865: Undefined Security WeaknessN/AN/A0%Oct 18, 2026
CVE-2026-98864: Undefined Security WeaknessN/AN/A0%Oct 18, 2026
CVE-2026-98863: Undefined Security WeaknessN/AN/A0%Oct 18, 2026
CVE-2026-98862: Undefined Security WeaknessN/AN/A0%Oct 18, 2026
CVE-2026-98861: Undefined Security WeaknessN/AN/A0%Oct 18, 2026
CVE-2026-98860: Undefined Security WeaknessN/AN/A0%Oct 18, 2026
CVE-2026-98859: Undefined Security WeaknessN/AN/A0%Oct 18, 2026
CVE-2026-98858: Undefined Security WeaknessN/AN/A0%Oct 18, 2026
CVE-2026-98857: Undefined Security WeaknessN/AN/A0%Oct 18, 2026
2776-2800 of 417319