The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111646: Missing Authorization5.9 Medium8.2 High0%Oct 16, 2026
CVE-2026-111645: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111640: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111638: Missing Authorization7.7 High8.3 High0%Oct 16, 2026
CVE-2026-111632: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111631: Missing Authorization5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111627: Incorrect Authorization7.2 High8.6 High1%Oct 16, 2026
CVE-2026-111626: Missing Authentication for Critical Function9.8 Critical9.3 Critical0%Oct 16, 2026
CVE-2026-111625: Missing Authorization5.0 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111624: Missing Authentication for Critical Function3.7 Low6.3 Medium0%Oct 16, 2026
CVE-2026-111622: URL Redirection to Untrusted Site6.8 Medium7.6 High0%Oct 16, 2026
CVE-2026-111621: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111620: Authorization Bypass Through User-Controlled Key5.3 Medium6.0 Medium0%Oct 16, 2026
CVE-2026-111616: Authorization Bypass Through User-Controlled Key4.9 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111610: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111606: Missing Authorization8.1 High8.6 High0%Oct 16, 2026
CVE-2026-111605: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Oct 16, 2026
CVE-2026-111604: Authorization Bypass Through User-Controlled Key3.8 Low5.1 Medium0%Oct 16, 2026
CVE-2026-111603: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-109588: Numeric Truncation Error8.8 High9.3 Critical0%Oct 16, 2026
CVE-2026-109587: Incorrect Authorization8.8 High9.3 Critical0%Oct 16, 2026
CVE-2026-97380: Unverified Password Change8.8 HighN/A1%Oct 16, 2026
CVE-2026-86008: Improper Authorization7.2 HighN/A0%Oct 16, 2026
CVE-2026-57447: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Oct 16, 2026
CVE-2026-55836: Exposure of Sensitive Information to an Unauthorized Actor6.8 MediumN/A0%Oct 16, 2026
326-350 of 12116
‹›