The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-111682: Missing Authorization6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111681: Missing Authorization8.8 High8.7 High0%Oct 16, 2026
CVE-2026-111680: Authorization Bypass Through User-Controlled Key8.3 High7.2 High0%Oct 16, 2026
CVE-2026-111679: Missing Authorization5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111678: Out-of-bounds Read3.3 Low4.8 Medium0%Oct 16, 2026
CVE-2026-111677: Out-of-bounds Read5.5 Medium6.8 Medium0%Oct 16, 2026
CVE-2026-111676: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111675: Improper Restriction of Excessive Authentication Attempts7.4 High9.1 Critical0%Oct 16, 2026
CVE-2026-111674: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111673: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Oct 16, 2026
CVE-2026-111672: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111671: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Oct 16, 2026
CVE-2026-111670: Missing Authorization4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111669: Improper Neutralization of Special Elements used in an SQL Command6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111668: Missing Authorization5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111667: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111666: Incorrect Authorization4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111665: Missing Authorization5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111664: Missing Authentication for Critical Function4.4 Medium4.8 Medium0%Oct 16, 2026
CVE-2026-111663: Server-Side Request Forgery (SSRF)8.6 High9.2 Critical0%Oct 16, 2026
CVE-2026-111662: Server-Side Request Forgery (SSRF)5.8 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111661: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111660: Missing Authentication for Critical Function6.5 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111659: Missing Authentication for Critical Function6.5 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111658: Authorization Bypass Through User-Controlled Key3.8 Low5.1 Medium0%Oct 16, 2026
4076-4100 of 416054