The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-89202: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-63357: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-63354: Improper Neutralization of Input During Web Page Generation9.6 Critical9.4 Critical0%Oct 13, 2026
CVE-2026-63353: Improper Neutralization of Input During Web Page Generation9.6 Critical9.4 Critical0%Oct 13, 2026
CVE-2026-63352: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-63351: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-63350: Improper Neutralization of Directives in Dynamically Evaluated Code9.6 Critical9.4 Critical0%Oct 13, 2026
CVE-2026-89309: Missing Authentication for Critical Function10.0 Critical10.0 Critical0%Oct 13, 2026
CVE-2026-109699: Missing Authorization5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109696: Missing Authorization5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109684: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-109116: Authorization Bypass Through User-Controlled Key7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-108496: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-108493: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-108174: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-106598: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-106597: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-108492: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-109703: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-9268: Incorrect Authorization4.3 MediumN/A0%Oct 13, 2026
CVE-2026-85529: Incorrect Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-84284: Incorrect Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-82632: Incorrect Authorization3.1 LowN/A0%Oct 13, 2026
CVE-2026-78335: Incorrect Authorization4.2 MediumN/A0%Oct 13, 2026
CVE-2026-6567: Incorrect Authorization4.3 MediumN/A0%Oct 13, 2026
576-600 of 12097