The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109615: Missing Authorization6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109614: Missing Authorization6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109613: Missing Authorization7.1 High7.1 High0%Oct 12, 2026
CVE-2026-109611: Missing Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109610: Missing Authorization6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109599: Missing Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109598: Missing Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2023-54410: Improper Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-84312: Improper Authentication7.1 HighN/A0%Oct 12, 2026
CVE-2026-44828: Insertion of Sensitive Information into Externally-Accessible File or DirectoryN/A9.3 Critical0%Oct 12, 2026
CVE-2026-109568: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Oct 12, 2026
CVE-2026-109567: Improper Privilege Management7.2 High8.6 High0%Oct 12, 2026
CVE-2026-109566: Use of Hard-coded Credentials9.8 Critical9.3 Critical0%Oct 12, 2026
CVE-2026-109564: Missing Authorization3.1 Low2.3 Low0%Oct 12, 2026
CVE-2026-109562: Missing Authorization5.4 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109561: Incorrect Authorization4.2 Medium2.3 Low0%Oct 12, 2026
CVE-2026-109427: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109377: Missing Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109376: Incorrect Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-106495: Improper Access Control4.3 MediumN/A0%Oct 12, 2026
CVE-2021-48012: Improperly Controlled Modification of Object Prototype Attributes8.2 High8.8 High0%Oct 12, 2026
CVE-2026-96012: Undefined Security Weakness9.9 CriticalN/A1%Oct 12, 2026
CVE-2026-108924: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-18166: Improper Access Control7.7 HighN/A0%Oct 12, 2026
CVE-2026-102663: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Oct 12, 2026
651-675 of 12096
‹›