The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111893: Improper Privilege Management6.5 Medium8.5 High0%Oct 17, 2026
CVE-2026-111892: Improper Restriction of Excessive Authentication Attempts6.5 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111891: Improper Privilege Management5.5 Medium7.0 High0%Oct 17, 2026
CVE-2026-111890: Improper Privilege Management5.5 Medium7.0 High0%Oct 17, 2026
CVE-2026-111889: Missing Authorization4.3 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111888: Incorrect Authorization2.7 Low5.1 Medium0%Oct 17, 2026
CVE-2026-111887: Observable Response Discrepancy5.3 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111886: Improper Restriction of Excessive Authentication Attempts6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111885: Insufficient Granularity of Access Control5.5 Medium7.0 High0%Oct 17, 2026
CVE-2026-111884: Use of Single-factor Authentication8.3 High8.7 High0%Oct 17, 2026
CVE-2026-111882: Improper Authentication8.1 High8.6 High0%Oct 17, 2026
CVE-2026-111881: Integer Underflow (Wrap or Wraparound)7.6 High7.2 High0%Oct 17, 2026
CVE-2026-111880: Out-of-bounds Write7.4 High8.3 High0%Oct 17, 2026
CVE-2026-110882: Missing Authorization4.3 MediumN/A0%Oct 17, 2026
CVE-2025-71435: Insufficient Session Expiration4.2 Medium2.3 Low0%Oct 17, 2026
CVE-2024-58398: coder: Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in…4.3 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111911: Improper Authentication9.8 Critical9.3 Critical0%Oct 17, 2026
CVE-2026-111906: Cross-Site Request Forgery (CSRF)6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111901: Uncontrolled Resource Consumption7.5 High8.7 High0%Oct 17, 2026
CVE-2026-109701: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 17, 2026
CVE-2026-110889: Generation of Error Message Containing Sensitive Information7.5 HighN/A0%Oct 17, 2026
CVE-2026-111110: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 17, 2026
CVE-2026-110253: Improper Limitation of a Pathname to a Restricted Directory5.4 MediumN/A0%Oct 17, 2026
CVE-2026-109983: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 17, 2026
CVE-2026-100316: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 17, 2026
3876-3900 of 414140
‹›