The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-111647: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111646: Missing Authorization5.9 Medium8.2 High0%Oct 16, 2026
CVE-2026-111645: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111644: Missing Authentication for Critical Function7.3 High6.9 Medium0%Oct 16, 2026
CVE-2026-111643: Missing Authentication for Critical Function9.8 Critical9.3 Critical0%Oct 16, 2026
CVE-2026-111642: Use of Hard-coded Cryptographic Key8.8 High8.7 High0%Oct 16, 2026
CVE-2026-111641: Missing Authentication for Critical Function9.8 Critical9.3 Critical0%Oct 16, 2026
CVE-2026-111640: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111639: Improper Authentication8.1 High8.6 High0%Oct 16, 2026
CVE-2026-111638: Missing Authorization7.7 High8.3 High0%Oct 16, 2026
CVE-2026-111637: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111636: Use of Hard-coded Cryptographic Key8.1 High9.2 Critical0%Oct 16, 2026
CVE-2026-111635: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111634: Improper Neutralization of Special Elements used in an SQL Command8.1 High8.6 High0%Oct 16, 2026
CVE-2026-111633: Use of Hard-coded Cryptographic Key8.6 High8.8 High0%Oct 16, 2026
CVE-2026-111632: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111631: Missing Authorization5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111630: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111629: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111628: Deserialization of Untrusted Data5.0 Medium2.3 Low0%Oct 16, 2026
CVE-2026-111627: Incorrect Authorization7.2 High8.6 High1%Oct 16, 2026
CVE-2026-111626: Missing Authentication for Critical Function9.8 Critical9.3 Critical0%Oct 16, 2026
CVE-2026-111625: Missing Authorization5.0 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111624: Missing Authentication for Critical Function3.7 Low6.3 Medium0%Oct 16, 2026
CVE-2026-111623: Authentication Bypass by Spoofing5.6 Medium6.3 Medium0%Oct 16, 2026
4351-4375 of 545063