The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-106176: Missing Authorization3.8 LowN/A0%Oct 13, 2026
CVE-2026-85990: Improper Privilege Management8.8 HighN/A0%Oct 13, 2026
CVE-2026-77459: Incorrect Authorization9.9 CriticalN/A1%Oct 13, 2026
CVE-2026-110131: Missing Authorization5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-110123: Missing Authorization7.1 High7.1 High0%Oct 13, 2026
CVE-2026-110118: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-110117: Missing Authorization6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-110110: Missing Authorization4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110109: Missing Authorization6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-110108: Missing Authorization8.1 High8.6 High0%Oct 13, 2026
CVE-2026-110105: Missing Authorization5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-110100: Missing Authorization5.4 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110099: Missing Authorization4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109898: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-109896: Missing Authorization4.3 MediumN/A0%Oct 13, 2026
CVE-2026-109890: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-103030: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 13, 2026
CVE-2026-96299: Reachable Assertion6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-49265: Observable Timing Discrepancy6.8 MediumN/A0%Oct 13, 2026
CVE-2026-109605: Improper Authorization7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109525: Missing Authorization7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109524: Missing Authorization5.3 Medium5.5 Medium1%Oct 13, 2026
CVE-2026-104005: Reachable Assertion6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-53418: Improper Authorization in Handler for Custom URL Scheme8.1 HighN/A0%Oct 13, 2026
CVE-2026-103028: Incorrect Authorization4.3 MediumN/A0%Oct 13, 2026
551-575 of 12104
‹›