The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-96614: Improper Authorization in Handler for Custom URL Scheme5.4 Medium5.1 Medium0%Oct 15, 2026
CVE-2026-76184: Exposure of Sensitive Information to an Unauthorized ActorN/A8.2 High0%Oct 15, 2026
CVE-2026-108092: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 15, 2026
CVE-2026-81534: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.8 HighN/A0%Oct 15, 2026
CVE-2026-103304: Missing Authorization5.3 MediumN/A0%Oct 15, 2026
CVE-2026-17031: Missing Authorization8.1 HighN/A0%Oct 15, 2026
CVE-2026-76066: Missing Authorization7.5 High8.7 High0%Oct 15, 2026
CVE-2026-110853: Authorization Bypass Through User-Controlled KeyN/A7.1 High0%Oct 14, 2026
CVE-2026-110851: Authorization Bypass Through User-Controlled KeyN/A6.1 Medium0%Oct 14, 2026
CVE-2026-110844: Incorrect AuthorizationN/A7.2 High0%Oct 14, 2026
CVE-2026-110841: Authorization Bypass Through User-Controlled KeyN/A6.1 Medium0%Oct 14, 2026
CVE-2026-107795: Missing AuthorizationN/A7.5 High0%Oct 14, 2026
CVE-2026-54702: Exposed Dangerous Method or FunctionN/A7.3 High0%Oct 14, 2026
CVE-2026-102985: Missing Authorization6.5 MediumN/A0%Oct 14, 2026
CVE-2026-110775: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 14, 2026
CVE-2026-110773: Missing Authorization4.3 Medium5.3 Medium0%Oct 14, 2026
CVE-2026-110772: Missing Authorization4.3 Medium5.3 Medium0%Oct 14, 2026
CVE-2026-110771: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 14, 2026
CVE-2026-110769: Initialization of a Resource with an Insecure Default8.6 High8.3 High0%Oct 14, 2026
CVE-2026-110768: Authentication Bypass by Spoofing4.8 Medium6.3 Medium0%Oct 14, 2026
CVE-2026-102944: Insufficiently Protected Credentials7.5 HighN/A0%Oct 14, 2026
CVE-2026-100406: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.2 High0%Oct 14, 2026
CVE-2026-109527: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Oct 14, 2026
CVE-2026-108480: Missing Authorization8.2 HighN/A0%Oct 14, 2026
CVE-2026-88164: Missing Authorization8.8 HighN/A1%Oct 14, 2026
426-450 of 12115