The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111908: Authorization Bypass Through User-Controlled Key8.3 High8.7 High0%Oct 17, 2026
CVE-2026-111907: Cross-Site Request Forgery (CSRF)7.1 High7.1 High0%Oct 17, 2026
CVE-2026-111905: Authorization Bypass Through User-Controlled Key6.0 Medium7.0 High0%Oct 17, 2026
CVE-2026-111904: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111903: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 17, 2026
CVE-2026-111902: Authorization Bypass Through User-Controlled Key5.3 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111900: Incorrect Authorization4.3 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111898: Improper Authentication7.5 High7.7 High0%Oct 17, 2026
CVE-2026-111897: Missing Authorization7.1 High7.1 High0%Oct 17, 2026
CVE-2026-111896: Collapse of Data into Unsafe Value5.4 Medium5.1 Medium0%Oct 17, 2026
CVE-2026-111895: Improper Authentication6.8 Medium7.6 High0%Oct 17, 2026
CVE-2026-111894: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 17, 2026
CVE-2026-111893: Improper Privilege Management6.5 Medium8.5 High0%Oct 17, 2026
CVE-2026-111892: Improper Restriction of Excessive Authentication Attempts6.5 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111891: Improper Privilege Management5.5 Medium7.0 High0%Oct 17, 2026
CVE-2026-111890: Improper Privilege Management5.5 Medium7.0 High0%Oct 17, 2026
CVE-2026-111889: Missing Authorization4.3 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111888: Incorrect Authorization2.7 Low5.1 Medium0%Oct 17, 2026
CVE-2026-111887: Observable Response Discrepancy5.3 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111886: Improper Restriction of Excessive Authentication Attempts6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111885: Insufficient Granularity of Access Control5.5 Medium7.0 High0%Oct 17, 2026
CVE-2026-111884: Use of Single-factor Authentication8.3 High8.7 High0%Oct 17, 2026
CVE-2026-111882: Improper Authentication8.1 High8.6 High0%Oct 17, 2026
CVE-2026-111881: Integer Underflow (Wrap or Wraparound)7.6 High7.2 High0%Oct 17, 2026
CVE-2026-111880: Out-of-bounds Write7.4 High8.3 High0%Oct 17, 2026
3876-3900 of 564809
‹›