The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-103305: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Oct 11, 2026
CVE-2026-108539: Use After Free6.3 Medium2.1 Low0%Oct 11, 2026
CVE-2026-108538: Use After Free6.3 Medium2.1 Low0%Oct 11, 2026
CVE-2026-108523: Server-Side Request Forgery (SSRF)4.3 Medium2.1 Low0%Oct 11, 2026
CVE-2026-108522: Improper Authentication8.3 High5.5 Medium0%Oct 11, 2026
CVE-2026-108521: Server-Side Request Forgery (SSRF)4.7 Medium2.0 Low0%Oct 11, 2026
CVE-2026-108708: Missing Authorization8.8 High8.7 High0%Oct 11, 2026
CVE-2026-108707: Improper Authentication9.8 Critical9.3 Critical1%Oct 11, 2026
CVE-2026-108706: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108705: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108704: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108703: Missing Authorization5.4 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108702: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108701: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108700: Missing Authorization6.5 Medium7.1 High0%Oct 11, 2026
CVE-2026-108696: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108695: Incorrect Authorization7.1 High7.1 High0%Oct 11, 2026
CVE-2026-108694: External Control of File Name or Path6.5 Medium7.1 High0%Oct 11, 2026
CVE-2026-108693: Uncontrolled Search Path Element7.0 High7.3 High0%Oct 11, 2026
CVE-2026-108692: Missing Authorization6.5 Medium7.1 High0%Oct 11, 2026
CVE-2026-108691: Operator Precedence Logic Error5.4 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108690: Operator Precedence Logic Error4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108689: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-108688: Missing Authorization4.3 Medium5.3 Medium0%Oct 11, 2026
CVE-2026-104841: Undefined Security WeaknessN/AN/AN/AOct 10, 2026
5151-5175 of 412906
‹›