The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111657: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111656: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111655: Authorization Bypass Through User-Controlled Key3.8 Low5.1 Medium0%Oct 16, 2026
CVE-2026-111654: Authorization Bypass Through User-Controlled Key6.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111653: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111652: Missing Authorization5.3 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111651: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111650: Missing Authentication for Critical Function8.6 High8.8 High0%Oct 16, 2026
CVE-2026-111649: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111648: Authorization Bypass Through User-Controlled Key2.7 Low5.1 Medium0%Oct 16, 2026
CVE-2026-111647: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111646: Missing Authorization5.9 Medium8.2 High0%Oct 16, 2026
CVE-2026-111645: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111644: Missing Authentication for Critical Function7.3 High6.9 Medium0%Oct 16, 2026
CVE-2026-111643: Missing Authentication for Critical Function9.8 Critical9.3 Critical0%Oct 16, 2026
CVE-2026-111642: Use of Hard-coded Cryptographic Key8.8 High8.7 High0%Oct 16, 2026
CVE-2026-111641: Missing Authentication for Critical Function9.8 Critical9.3 Critical0%Oct 16, 2026
CVE-2026-111640: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111639: Improper Authentication8.1 High8.6 High0%Oct 16, 2026
CVE-2026-111638: Missing Authorization7.7 High8.3 High0%Oct 16, 2026
CVE-2026-111637: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111636: Use of Hard-coded Cryptographic Key8.1 High9.2 Critical0%Oct 16, 2026
CVE-2026-111635: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111634: Improper Neutralization of Special Elements used in an SQL Command8.1 High8.6 High0%Oct 16, 2026
CVE-2026-111633: Use of Hard-coded Cryptographic Key8.6 High8.8 High0%Oct 16, 2026
4101-4125 of 416054
‹›