The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111604: Authorization Bypass Through User-Controlled Key3.8 Low5.1 Medium0%Oct 16, 2026
CVE-2026-111603: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111392: Insufficient Verification of Data Authenticity4.8 Medium6.3 Medium0%Oct 16, 2026
CVE-2026-109839: Missing Cryptographic Step3.1 LowN/A1%Oct 16, 2026
CVE-2026-109838: Improper Verification of Cryptographic Signature5.1 MediumN/A0%Oct 16, 2026
CVE-2026-109588: Numeric Truncation Error8.8 High9.3 Critical0%Oct 16, 2026
CVE-2026-109587: Incorrect Authorization8.8 High9.3 Critical0%Oct 16, 2026
CVE-2026-102552: Improper Verification of Source of a Communication Channel5.9 Medium8.2 High0%Oct 16, 2026
CVE-2026-102551: Improper Verification of Source of a Communication Channel7.7 High9.2 Critical0%Oct 16, 2026
CVE-2026-97380: Unverified Password Change8.8 HighN/A1%Oct 16, 2026
CVE-2026-92262: Use of Incorrectly-Resolved Name or Reference9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-86047: Improper Neutralization of Special Elements used in an SQL Command7.7 HighN/A0%Oct 16, 2026
CVE-2026-86009: Improper AuthorizationN/A8.2 High0%Oct 16, 2026
CVE-2026-86008: Improper Authorization7.2 HighN/A0%Oct 16, 2026
CVE-2026-85985: Missing Authorization5.4 MediumN/A0%Oct 16, 2026
CVE-2026-85748: Use After Free9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-85746: Out-of-bounds Write9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-85745: Buffer Over-read4.3 MediumN/A0%Oct 16, 2026
CVE-2026-77474: Uncontrolled Resource Consumption7.1 HighN/A0%Oct 16, 2026
CVE-2026-62362: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Oct 16, 2026
CVE-2026-59967: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Oct 16, 2026
CVE-2026-59962: Improper Neutralization of Special Elements in Data Query Logic6.5 MediumN/A0%Oct 16, 2026
CVE-2026-57169: Missing Authentication for Critical Function9.6 CriticalN/A0%Oct 16, 2026
CVE-2026-49868: Out-of-bounds Read9.8 CriticalN/A0%Oct 16, 2026
CVE-2026-102693: Buffer Copy without Checking Size of Input9.6 CriticalN/A0%Oct 16, 2026
4901-4925 of 413119
‹›