The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-111672: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111671: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Oct 16, 2026
CVE-2026-111670: Missing Authorization4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111669: Improper Neutralization of Special Elements used in an SQL Command6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111668: Missing Authorization5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111667: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111666: Incorrect Authorization4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111665: Missing Authorization5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111664: Missing Authentication for Critical Function4.4 Medium4.8 Medium0%Oct 16, 2026
CVE-2026-111663: Server-Side Request Forgery (SSRF)8.6 High9.2 Critical0%Oct 16, 2026
CVE-2026-111662: Server-Side Request Forgery (SSRF)5.8 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111661: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111660: Missing Authentication for Critical Function6.5 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111659: Missing Authentication for Critical Function6.5 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111658: Authorization Bypass Through User-Controlled Key3.8 Low5.1 Medium0%Oct 16, 2026
CVE-2026-111657: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111656: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111655: Authorization Bypass Through User-Controlled Key3.8 Low5.1 Medium0%Oct 16, 2026
CVE-2026-111654: Authorization Bypass Through User-Controlled Key6.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111653: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111652: Missing Authorization5.3 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111651: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111650: Missing Authentication for Critical Function8.6 High8.8 High0%Oct 16, 2026
CVE-2026-111649: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111648: Authorization Bypass Through User-Controlled Key2.7 Low5.1 Medium0%Oct 16, 2026
4326-4350 of 545063