The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111610: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111609: Authorization Bypass Through User-Controlled Key3.8 Low5.1 Medium0%Oct 16, 2026
CVE-2026-111608: Authorization Bypass Through User-Controlled Key4.2 Medium2.3 Low0%Oct 16, 2026
CVE-2026-111607: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Oct 16, 2026
CVE-2026-111606: Missing Authorization8.1 High8.6 High0%Oct 16, 2026
CVE-2026-111605: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Oct 16, 2026
CVE-2026-111604: Authorization Bypass Through User-Controlled Key3.8 Low5.1 Medium0%Oct 16, 2026
CVE-2026-111603: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111392: Insufficient Verification of Data Authenticity4.8 Medium6.3 Medium0%Oct 16, 2026
CVE-2026-109839: Missing Cryptographic Step3.1 LowN/A1%Oct 16, 2026
CVE-2026-109838: Improper Verification of Cryptographic Signature5.1 MediumN/A0%Oct 16, 2026
CVE-2026-109588: Numeric Truncation Error8.8 High9.3 Critical0%Oct 16, 2026
CVE-2026-109587: Incorrect Authorization8.8 High9.3 Critical0%Oct 16, 2026
CVE-2026-102552: Improper Verification of Source of a Communication Channel5.9 Medium8.2 High0%Oct 16, 2026
CVE-2026-102551: Improper Verification of Source of a Communication Channel7.7 High9.2 Critical0%Oct 16, 2026
CVE-2026-97380: Unverified Password Change8.8 HighN/A1%Oct 16, 2026
CVE-2026-92262: Use of Incorrectly-Resolved Name or Reference9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-86047: Improper Neutralization of Special Elements used in an SQL Command7.7 HighN/A0%Oct 16, 2026
CVE-2026-86009: Improper AuthorizationN/A8.2 High0%Oct 16, 2026
CVE-2026-86008: Improper Authorization7.2 HighN/A0%Oct 16, 2026
CVE-2026-85985: Missing Authorization5.4 MediumN/A0%Oct 16, 2026
CVE-2026-85748: Use After Free9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-85746: Out-of-bounds Write9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-85745: Buffer Over-read4.3 MediumN/A0%Oct 16, 2026
CVE-2026-77474: Uncontrolled Resource Consumption7.1 HighN/A0%Oct 16, 2026
4876-4900 of 548770
‹›