The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-107856: Authorization Bypass Through User-Controlled Key4.5 MediumN/A0%Oct 9, 2026
CVE-2026-107854: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Oct 9, 2026
CVE-2026-107852: Insufficient Verification of Data AuthenticityN/A7.1 High0%Oct 9, 2026
CVE-2026-107851: Use of Cache Containing Sensitive Information4.3 MediumN/A0%Oct 9, 2026
CVE-2026-107850: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 9, 2026
CVE-2026-107848: Cross-Site Request Forgery (CSRF)3.5 LowN/A0%Oct 9, 2026
CVE-2026-78797: Improper Control of Generation of Code9.8 CriticalN/A1%Oct 9, 2026
CVE-2026-107845: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%Oct 9, 2026
CVE-2026-107844: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Oct 9, 2026
CVE-2026-107843: Observable Response Discrepancy5.3 MediumN/A0%Oct 9, 2026
CVE-2026-107842: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 9, 2026
CVE-2026-104758: Undefined Security WeaknessN/AN/AN/AOct 9, 2026
CVE-2025-8457: Undefined Security WeaknessN/AN/AN/AOct 9, 2026
CVE-2026-78835: Insufficiently Protected Credentials9.8 CriticalN/A0%Oct 9, 2026
CVE-2026-75353: Undefined Security WeaknessN/AN/A0%Oct 9, 2026
CVE-2026-75352: Integer Underflow (Wrap or Wraparound)7.5 HighN/A0%Oct 9, 2026
CVE-2026-75351: Out-of-bounds Read7.5 HighN/A0%Oct 9, 2026
CVE-2026-75350: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 9, 2026
CVE-2026-108096: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 9, 2026
CVE-2026-107841: Incorrect Authorization5.7 MediumN/A0%Oct 9, 2026
CVE-2026-107840: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 9, 2026
CVE-2026-107839: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 9, 2026
CVE-2026-107838: Unchecked Return Value7.5 HighN/A0%Oct 9, 2026
CVE-2026-107837: Out-of-bounds Read8.2 HighN/A0%Oct 9, 2026
CVE-2026-107836: Out-of-bounds ReadN/A7.1 High0%Oct 9, 2026
5701-5725 of 406803