The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-45165: Incorrect AuthorizationN/A8.6 High0%Oct 15, 2026
CVE-2026-111235: Missing Authorization9.1 CriticalN/A0%Oct 15, 2026
CVE-2026-111231: Incorrect Authorization7.2 High8.6 High1%Oct 15, 2026
CVE-2026-111169: Authorization Bypass Through User-Controlled Key3.1 Low2.3 Low0%Oct 15, 2026
CVE-2026-110378: Missing Authorization5.3 MediumN/A0%Oct 15, 2026
CVE-2026-110374: Missing Authorization4.3 MediumN/A0%Oct 15, 2026
CVE-2026-110364: Missing Authorization5.3 MediumN/A0%Oct 15, 2026
CVE-2026-110362: Missing Authorization5.3 MediumN/A0%Oct 15, 2026
CVE-2026-110360: Missing Authorization5.3 MediumN/A0%Oct 15, 2026
CVE-2026-109897: Missing Authorization5.4 MediumN/A0%Oct 15, 2026
CVE-2026-109689: Missing Authorization5.3 MediumN/A0%Oct 15, 2026
CVE-2026-108499: Missing Authorization5.3 MediumN/A0%Oct 15, 2026
CVE-2026-103083: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Oct 15, 2026
CVE-2026-110891: Missing Authorization5.4 MediumN/A0%Oct 15, 2026
CVE-2026-110888: Missing Authorization4.3 MediumN/A0%Oct 15, 2026
CVE-2026-110381: Authorization Bypass Through User-Controlled Key6.3 MediumN/A0%Oct 15, 2026
CVE-2026-110371: Missing Authorization4.3 MediumN/A0%Oct 15, 2026
CVE-2026-110367: Missing Authorization5.3 MediumN/A0%Oct 15, 2026
CVE-2026-61610: Improper Access ControlN/A2.3 Low0%Oct 15, 2026
CVE-2026-100409: Improper Handling of URL Encoding (Hex Encoding)7.5 HighN/A0%Oct 15, 2026
CVE-2026-97665: Missing AuthorizationN/A7.1 High0%Oct 15, 2026
CVE-2026-46708: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 15, 2026
CVE-2026-109692: Missing Authorization7.1 HighN/A0%Oct 15, 2026
CVE-2026-107416: Authorization Bypass Through User-Controlled Key7.5 HighN/A0%Oct 15, 2026
CVE-2026-44084: Authorization Bypass Through User-Controlled Key7.5 High8.7 High0%Oct 15, 2026
401-425 of 12115
‹›