The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111919: Insufficient Session Expiration6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111918: Incorrect Authorization5.4 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111917: Insufficient Session Expiration6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111916: Missing Authorization5.3 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111914: Missing Authorization6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111913: Improper Authorization4.3 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111912: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111910: Missing Authorization6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111909: Improper Privilege Management8.1 High7.2 High0%Oct 17, 2026
CVE-2026-111908: Authorization Bypass Through User-Controlled Key8.3 High8.7 High0%Oct 17, 2026
CVE-2026-111907: Cross-Site Request Forgery (CSRF)7.1 High7.1 High0%Oct 17, 2026
CVE-2026-111905: Authorization Bypass Through User-Controlled Key6.0 Medium7.0 High0%Oct 17, 2026
CVE-2026-111904: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111903: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 17, 2026
CVE-2026-111902: Authorization Bypass Through User-Controlled Key5.3 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111900: Incorrect Authorization4.3 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111898: Improper Authentication7.5 High7.7 High0%Oct 17, 2026
CVE-2026-111897: Missing Authorization7.1 High7.1 High0%Oct 17, 2026
CVE-2026-111896: Collapse of Data into Unsafe Value5.4 Medium5.1 Medium0%Oct 17, 2026
CVE-2026-111895: Improper Authentication6.8 Medium7.6 High0%Oct 17, 2026
CVE-2026-111894: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 17, 2026
CVE-2026-111893: Improper Privilege Management6.5 Medium8.5 High0%Oct 17, 2026
CVE-2026-111892: Improper Restriction of Excessive Authentication Attempts6.5 Medium6.9 Medium0%Oct 17, 2026
CVE-2026-111891: Improper Privilege Management5.5 Medium7.0 High0%Oct 17, 2026
CVE-2026-111890: Improper Privilege Management5.5 Medium7.0 High0%Oct 17, 2026
3876-3900 of 564809
‹›