The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111929: Incorrect Authorization5.3 Medium6.0 Medium0%Oct 17, 2026
CVE-2026-111928: Incorrect Authorization5.4 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111927: Insufficiently Protected Credentials7.7 High8.7 High0%Oct 17, 2026
CVE-2026-111926: Exposure of Sensitive Information to an Unauthorized Actor3.3 Low4.8 Medium0%Oct 17, 2026
CVE-2026-111924: Improper Handling of Highly Compressed Data (Data Amplification)7.5 High8.7 High0%Oct 17, 2026
CVE-2026-111923: Uncontrolled Recursion7.5 High8.7 High0%Oct 17, 2026
CVE-2026-111922: Permissive Cross-domain Policy with Untrusted Domains6.3 Medium7.2 High0%Oct 17, 2026
CVE-2026-111921: Incorrect Authorization5.4 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111920: Improper Privilege Management4.3 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111919: Insufficient Session Expiration6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111918: Incorrect Authorization5.4 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111917: Insufficient Session Expiration6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111916: Missing Authorization5.3 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111914: Missing Authorization6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111913: Improper Authorization4.3 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111912: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111910: Missing Authorization6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111909: Improper Privilege Management8.1 High7.2 High0%Oct 17, 2026
CVE-2026-111908: Authorization Bypass Through User-Controlled Key8.3 High8.7 High0%Oct 17, 2026
CVE-2026-111907: Cross-Site Request Forgery (CSRF)7.1 High7.1 High0%Oct 17, 2026
CVE-2026-111905: Authorization Bypass Through User-Controlled Key6.0 Medium7.0 High0%Oct 17, 2026
CVE-2026-111904: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111903: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 17, 2026
CVE-2026-111902: Authorization Bypass Through User-Controlled Key5.3 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111900: Incorrect Authorization4.3 Medium5.3 Medium0%Oct 17, 2026
3826-3850 of 414140
‹›