The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-108748: Missing Release of Memory after Effective Lifetime5.3 Medium6.9 Medium0%Oct 11, 2026
CVE-2026-108747: Authorization Bypass Through User-Controlled Key4.2 Medium2.3 Low0%Oct 11, 2026
CVE-2026-108746: Incorrect Authorization8.8 High8.7 High0%Oct 11, 2026
CVE-2026-108745: Missing Authorization3.1 Low2.3 Low0%Oct 11, 2026
CVE-2026-108744: Improper Neutralization of Special Elements used in an OS Command7.0 High7.3 High1%Oct 11, 2026
CVE-2026-108742: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108741: Time-of-check Time-of-use (TOCTOU) Race Condition3.1 Low2.3 Low0%Oct 11, 2026
CVE-2026-108740: Improperly Controlled Modification of Dynamically-Determined Object Attributes8.3 High7.2 High0%Oct 11, 2026
CVE-2026-108739: Missing Authentication for Critical Function7.5 High8.7 High0%Oct 11, 2026
CVE-2026-108738: Cross-Site Request Forgery (CSRF)4.2 Medium2.3 Low0%Oct 11, 2026
CVE-2026-108737: Weak Password Recovery Mechanism for Forgotten Password6.8 Medium7.6 High0%Oct 11, 2026
CVE-2026-108736: Use of Less Trusted Source3.7 Low6.3 Medium0%Oct 11, 2026
CVE-2026-108735: Server-Side Request Forgery (SSRF)4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108734: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108733: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108732: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108731: Missing Authorization5.4 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108730: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108729: Incorrect Authorization5.9 Medium8.2 High0%Oct 11, 2026
CVE-2026-108728: Cleartext Storage of Sensitive Information6.5 Medium7.1 High0%Oct 11, 2026
CVE-2026-108727: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108726: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108725: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 11, 2026
CVE-2026-108724: Authorization Bypass Through User-Controlled Key5.3 Medium6.9 Medium0%Oct 11, 2026
CVE-2026-108723: Improper Link Resolution Before File Access2.5 Low2.0 Low0%Oct 11, 2026
4976-5000 of 412906
‹›