The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109347: Improper Control of Generation of Code7.2 High8.6 High1%Oct 12, 2026
CVE-2026-109346: User Interface (UI) Misrepresentation of Critical Information8.1 High8.5 High0%Oct 12, 2026
CVE-2026-109345: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 12, 2026
CVE-2026-109344: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 12, 2026
CVE-2026-109343: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Oct 12, 2026
CVE-2026-109342: Missing Authentication for Critical Function5.4 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109341: Exposure of Sensitive Information to an Unauthorized Actor7.1 High7.1 High0%Oct 12, 2026
CVE-2026-109340: Missing Authorization5.4 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109339: Allocation of Resources Without Limits or Throttling4.9 Medium6.9 Medium0%Oct 12, 2026
CVE-2026-109338: Uncaught Exception6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109337: Observable Discrepancy4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109336: Incorrect Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109335: Exposure of Sensitive Information to an Unauthorized Actor6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109334: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Oct 12, 2026
CVE-2026-109333: Missing Authorization6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109332: Origin Validation Error3.1 Low2.3 Low0%Oct 12, 2026
CVE-2026-109331: Interpretation Conflict7.4 High7.5 High0%Oct 12, 2026
CVE-2026-109330: Missing Origin Validation in WebSockets4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109329: Authorization Bypass Through User-Controlled Key6.5 Medium8.5 High0%Oct 12, 2026
CVE-2026-109328: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109327: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 12, 2026
CVE-2026-109326: Exposure of Version-Control Repository to an Unauthorized Control Sphere7.5 High8.7 High0%Oct 12, 2026
CVE-2026-109325: Exposure of Sensitive Information to an Unauthorized Actor7.5 High8.7 High0%Oct 12, 2026
CVE-2026-109324: Improper Handling of Highly Compressed Data (Data Amplification)6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109323: Missing Authorization5.3 Medium6.9 Medium0%Oct 12, 2026
4451-4475 of 411907
‹›