The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-110110: Missing Authorization4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110109: Missing Authorization6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-110108: Missing Authorization8.1 High8.6 High0%Oct 13, 2026
CVE-2026-110107: Authorization Bypass Through User-Controlled Key4.2 Medium2.3 Low0%Oct 13, 2026
CVE-2026-110106: Authorization Bypass Through User-Controlled Key4.2 Medium2.3 Low0%Oct 13, 2026
CVE-2026-110105: Missing Authorization5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-110104: Use of Password Hash With Insufficient Computational Effort5.9 Medium8.2 High0%Oct 13, 2026
CVE-2026-110103: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 13, 2026
CVE-2026-110102: Download of Code Without Integrity Check7.5 High7.7 High0%Oct 13, 2026
CVE-2026-110101: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 13, 2026
CVE-2026-110100: Missing Authorization5.4 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110099: Missing Authorization4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110098: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110097: Improper Authentication8.1 High8.6 High0%Oct 13, 2026
CVE-2026-10759: Improper Neutralization of Special Elements used in an LDAP Query5.5 MediumN/A0%Oct 13, 2026
CVE-2026-109898: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-109896: Missing Authorization4.3 MediumN/A0%Oct 13, 2026
CVE-2026-109890: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-109828: Use of Uninitialized Variable4.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109827: Out-of-bounds Write6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109620: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109607: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109606: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109412: Exposed Dangerous Method or Function9.9 CriticalN/A1%Oct 13, 2026
CVE-2026-106047: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A1%Oct 13, 2026
2801-2825 of 443717
‹›