The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-111921: Incorrect Authorization5.4 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111918: Incorrect Authorization5.4 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111913: Improper Authorization4.3 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111910: Missing Authorization6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111909: Improper Privilege Management8.1 High7.2 High0%Oct 17, 2026
CVE-2026-111908: Authorization Bypass Through User-Controlled Key8.3 High8.7 High0%Oct 17, 2026
CVE-2026-111902: Authorization Bypass Through User-Controlled Key5.3 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111900: Incorrect Authorization4.3 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111897: Missing Authorization7.1 High7.1 High0%Oct 17, 2026
CVE-2026-111889: Missing Authorization4.3 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111888: Incorrect Authorization2.7 Low5.1 Medium0%Oct 17, 2026
CVE-2026-111885: Insufficient Granularity of Access Control5.5 Medium7.0 High0%Oct 17, 2026
CVE-2026-110882: Missing Authorization4.3 MediumN/A0%Oct 17, 2026
CVE-2025-71435: Insufficient Session Expiration4.2 Medium2.3 Low0%Oct 17, 2026
CVE-2026-92431: Missing Authorization3.7 LowN/A0%Oct 17, 2026
CVE-2026-109369: Missing Authorization6.8 MediumN/A0%Oct 17, 2026
CVE-2026-108123: Missing Authorization7.5 HighN/A0%Oct 17, 2026
CVE-2026-107744: Missing Authorization6.5 MediumN/A0%Oct 17, 2026
CVE-2026-107763: Missing Authorization4.3 MediumN/A0%Oct 17, 2026
CVE-2026-108374: Missing Authorization7.7 HighN/A0%Oct 16, 2026
CVE-2026-108373: Missing Authorization6.5 MediumN/A0%Oct 16, 2026
CVE-2026-61726: Improper Access Control8.1 HighN/A0%Oct 16, 2026
CVE-2026-59963: Authorization Bypass Through User-Controlled Key7.1 HighN/A0%Oct 16, 2026
CVE-2026-111723: Missing Authorization8.8 High8.7 High0%Oct 16, 2026
CVE-2026-111721: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
276-300 of 12116