The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-106090: Incorrect Authorization8.8 HighN/A0%Oct 13, 2026
CVE-2026-106089: Incorrect Authorization8.8 HighN/A0%Oct 13, 2026
CVE-2026-105994: Incorrect Authorization7.7 HighN/A0%Oct 13, 2026
CVE-2026-105901: Incorrect Authorization8.8 HighN/A0%Oct 13, 2026
CVE-2026-105898: Incorrect Authorization8.2 HighN/A0%Oct 13, 2026
CVE-2026-90532: Incorrect Authorization10.0 CriticalN/A1%Oct 13, 2026
CVE-2026-75732: Incorrect Authorization9.9 CriticalN/A1%Oct 13, 2026
CVE-2026-70098: Missing Authorization8.8 HighN/A0%Oct 13, 2026
CVE-2026-63172: Missing Authorization7.1 High7.1 High0%Oct 13, 2026
CVE-2026-63163: Authorization Bypass Through User-Controlled Key7.5 High8.7 High0%Oct 13, 2026
CVE-2026-56826: Missing Authorization5.4 MediumN/A0%Oct 13, 2026
CVE-2026-48383: Incorrect Authorization10.0 CriticalN/A1%Oct 13, 2026
CVE-2026-48382: Incorrect Authorization10.0 CriticalN/A1%Oct 13, 2026
CVE-2026-16753: Undefined Security Weakness8.8 HighN/A0%Oct 13, 2026
CVE-2026-96926: Missing Authorization5.5 MediumN/A0%Oct 13, 2026
CVE-2026-96315: Missing Authorization5.5 MediumN/A0%Oct 13, 2026
CVE-2026-96311: Missing Authorization5.5 MediumN/A0%Oct 13, 2026
CVE-2026-92910: Incorrect Authorization7.2 HighN/A0%Oct 13, 2026
CVE-2026-92909: Incorrect Authorization9.8 CriticalN/A1%Oct 13, 2026
CVE-2026-92908: Incorrect Authorization8.3 HighN/A1%Oct 13, 2026
CVE-2026-88198: Missing Authorization8.8 HighN/A1%Oct 13, 2026
CVE-2026-88162: Incorrect Authorization5.5 MediumN/A0%Oct 13, 2026
CVE-2026-88133: Improper Link Resolution Before File Access7.8 HighN/A0%Oct 13, 2026
CVE-2026-87714: Missing Authorization6.5 MediumN/A0%Oct 13, 2026
CVE-2026-85873: Authorization Bypass Through User-Controlled Key6.5 MediumN/A1%Oct 13, 2026
501-525 of 12115