The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-108857: Insertion of Sensitive Information into Log File3.3 Low4.8 Medium0%Oct 11, 2026
CVE-2026-108856: Authorization Bypass Through User-Controlled Key4.2 Medium2.3 Low0%Oct 11, 2026
CVE-2026-108855: Missing Authorization5.4 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108854: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108853: Authorization Bypass Through User-Controlled Key8.1 High7.2 High0%Oct 11, 2026
CVE-2026-108852: Improper Neutralization of Input During Web Page Generation4.7 Medium2.1 Low0%Oct 11, 2026
CVE-2026-108851: Missing Authorization3.3 Low4.8 Medium0%Oct 11, 2026
CVE-2026-108850: Server-Side Request Forgery (SSRF)5.3 Medium6.9 Medium0%Oct 11, 2026
CVE-2026-108839: Improper Link Resolution Before File Access4.2 Medium2.3 Low0%Oct 11, 2026
CVE-2026-108699: Improper Verification of Cryptographic Signature6.5 Medium8.3 High0%Oct 11, 2026
CVE-2026-108698: Time-of-check Time-of-use (TOCTOU) Race Condition6.5 Medium8.3 High0%Oct 11, 2026
CVE-2026-108697: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108681: Improper Resource Shutdown or Release4.3 Medium2.1 Low0%Oct 11, 2026
CVE-2026-108760: Binding to an Unrestricted IP Address7.6 High7.2 High0%Oct 11, 2026
CVE-2026-108759: Improper Link Resolution Before File Access6.8 Medium7.6 High0%Oct 11, 2026
CVE-2026-108758: Authorization Bypass Through User-Controlled Key8.2 High8.8 High0%Oct 11, 2026
CVE-2026-108757: Missing Authentication for Critical Function6.5 Medium7.1 High0%Oct 11, 2026
CVE-2026-108756: Missing Authorization5.4 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108755: Allocation of Resources Without Limits or Throttling5.3 Medium6.9 Medium0%Oct 11, 2026
CVE-2026-108754: Insertion of Sensitive Information into Log File3.3 Low4.8 Medium0%Oct 11, 2026
CVE-2026-108753: Use of Hard-coded Credentials9.4 Critical9.3 Critical0%Oct 11, 2026
CVE-2026-108752: Use of Multiple Resources with Duplicate Identifier4.2 Medium2.3 Low0%Oct 11, 2026
CVE-2026-108751: Improper Link Resolution Before File Access4.4 Medium4.8 Medium0%Oct 11, 2026
CVE-2026-108750: Improper Handling of Highly Compressed Data (Data Amplification)4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108749: Missing Authentication for Critical FunctionN/A6.3 Medium0%Oct 11, 2026
4951-4975 of 412906
‹›