The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-111635: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111634: Improper Neutralization of Special Elements used in an SQL Command8.1 High8.6 High0%Oct 16, 2026
CVE-2026-111633: Use of Hard-coded Cryptographic Key8.6 High8.8 High0%Oct 16, 2026
CVE-2026-111632: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111631: Missing Authorization5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111630: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111629: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111628: Deserialization of Untrusted Data5.0 Medium2.3 Low0%Oct 16, 2026
CVE-2026-111627: Incorrect Authorization7.2 High8.6 High1%Oct 16, 2026
CVE-2026-111626: Missing Authentication for Critical Function9.8 Critical9.3 Critical0%Oct 16, 2026
CVE-2026-111625: Missing Authorization5.0 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111624: Missing Authentication for Critical Function3.7 Low6.3 Medium0%Oct 16, 2026
CVE-2026-111623: Authentication Bypass by Spoofing5.6 Medium6.3 Medium0%Oct 16, 2026
CVE-2026-111622: URL Redirection to Untrusted Site6.8 Medium7.6 High0%Oct 16, 2026
CVE-2026-111621: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111620: Authorization Bypass Through User-Controlled Key5.3 Medium6.0 Medium0%Oct 16, 2026
CVE-2026-111619: Improper Neutralization of Special Elements used in an SQL Command6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111618: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111617: Missing Authentication for Critical Function6.5 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111616: Authorization Bypass Through User-Controlled Key4.9 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111615: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111614: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111613: Missing Authentication for Critical Function7.5 High8.7 High0%Oct 16, 2026
CVE-2026-111612: Use of Hard-coded Cryptographic Key7.5 High8.7 High0%Oct 16, 2026
CVE-2026-111611: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
4851-4875 of 563271