The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-108879: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108878: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108877: Missing Authorization5.4 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108876: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108875: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108874: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108873: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108872: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108871: Missing Authorization5.4 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108870: Missing Authorization5.4 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108869: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108868: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108867: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108866: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108684: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108683: Memory Allocation with Excessive Size Value4.3 Medium2.1 Low0%Oct 11, 2026
CVE-2026-108682: Improper Resource Shutdown or Release5.4 Medium2.1 Low0%Oct 11, 2026
CVE-2026-108865: Improper Authentication8.2 High8.8 High0%Oct 11, 2026
CVE-2026-108864: Authorization Bypass Through User-Controlled Key4.2 Medium2.3 Low0%Oct 11, 2026
CVE-2026-108863: Missing Authentication for Critical Function7.5 High8.7 High0%Oct 11, 2026
CVE-2026-108862: Authorization Bypass Through User-Controlled Key5.3 Medium6.0 Medium0%Oct 11, 2026
CVE-2026-108861: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108860: Use of Hard-coded Cryptographic Key9.1 Critical9.3 Critical0%Oct 11, 2026
CVE-2026-108859: Allocation of Resources Without Limits or Throttling7.5 High8.7 High1%Oct 11, 2026
CVE-2026-108858: Insertion of Sensitive Information into Log File5.5 Medium6.8 Medium0%Oct 11, 2026
4926-4950 of 412906
‹›