The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-111356: Improper Restriction of Excessive Authentication Attempts7.4 High9.1 Critical0%Oct 15, 2026
CVE-2026-111355: Authorization Bypass Through User-Controlled Key6.3 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111354: Authorization Bypass Through User-Controlled Key3.1 Low2.3 Low0%Oct 15, 2026
CVE-2026-111353: Missing Authorization4.3 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111351: Authorization Bypass Through User-Controlled Key4.2 Medium2.3 Low0%Oct 15, 2026
CVE-2026-111350: Missing Authorization5.0 Medium2.3 Low0%Oct 15, 2026
CVE-2026-111349: Missing Authorization5.3 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111348: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111347: Use of Hard-coded Cryptographic Key5.9 Medium8.2 High0%Oct 15, 2026
CVE-2026-111346: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111345: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111344: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111343: Missing Authorization4.3 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111331: Authorization Bypass Through User-Controlled Key6.3 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111330: Use of Password Hash With Insufficient Computational Effort5.9 Medium8.2 High0%Oct 15, 2026
CVE-2026-111329: Use of Default Credentials9.8 Critical9.3 Critical1%Oct 15, 2026
CVE-2026-111324: Authorization Bypass Through User-Controlled Key5.3 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111323: Server-Side Request Forgery (SSRF)5.3 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111322: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Oct 15, 2026
CVE-2026-111321: Server-Side Request Forgery (SSRF)5.4 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111320: Server-Side Request Forgery (SSRF)6.5 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111313: Server-Side Request Forgery (SSRF)6.5 Medium7.1 High0%Oct 15, 2026
CVE-2026-111284: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 15, 2026
CVE-2026-111283: Authentication Bypass by Primary Weakness9.0 Critical9.5 Critical1%Oct 15, 2026
CVE-2026-111282: Integer Overflow or Wraparound8.2 High8.8 High0%Oct 15, 2026
5226-5250 of 530113