The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-93950: Missing Authorization7.5 HighN/A0%Oct 10, 2026
CVE-2026-104728: Missing Authorization4.3 MediumN/A0%Oct 10, 2026
CVE-2026-94538: Missing Authorization8.1 HighN/A0%Oct 10, 2026
CVE-2026-15178: Missing Authorization5.4 MediumN/A0%Oct 10, 2026
CVE-2026-91050: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 10, 2026
CVE-2026-105995: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 10, 2026
CVE-2026-105990: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 10, 2026
CVE-2026-105989: Missing Authorization5.3 MediumN/A0%Oct 10, 2026
CVE-2026-105977: Authorization Bypass Through User-Controlled Key2.2 LowN/A0%Oct 10, 2026
CVE-2026-105976: Incorrect Authorization4.7 MediumN/A0%Oct 10, 2026
CVE-2026-104742: Missing Authorization3.1 LowN/A0%Oct 10, 2026
CVE-2026-104741: Missing Authorization3.1 LowN/A0%Oct 10, 2026
CVE-2026-97670: Improper Control of Generation of Code9.1 CriticalN/A0%Oct 10, 2026
CVE-2026-6723: Incorrect Authorization5.3 MediumN/A0%Oct 10, 2026
CVE-2026-5727: Missing Authorization5.4 MediumN/A0%Oct 10, 2026
CVE-2026-104915: Missing Authorization6.5 MediumN/A0%Oct 10, 2026
CVE-2026-57458: Improper Privilege Management8.1 HighN/A0%Oct 9, 2026
CVE-2026-107851: Use of Cache Containing Sensitive Information4.3 MediumN/A0%Oct 9, 2026
CVE-2026-107842: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 9, 2026
CVE-2026-108096: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 9, 2026
CVE-2026-108112: Missing Authorization5.4 Medium5.3 Medium0%Oct 9, 2026
CVE-2026-108111: Missing Authorization4.3 Medium5.3 Medium0%Oct 9, 2026
CVE-2026-108110: Authorization Bypass Through User-Controlled Key6.8 Medium7.6 High0%Oct 9, 2026
CVE-2026-104117: Missing AuthorizationN/A1.9 Low0%Oct 9, 2026
CVE-2026-104116: Missing AuthorizationN/A1.9 Low0%Oct 9, 2026
876-900 of 12080