The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109343: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Oct 12, 2026
CVE-2026-109342: Missing Authentication for Critical Function5.4 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109341: Exposure of Sensitive Information to an Unauthorized Actor7.1 High7.1 High0%Oct 12, 2026
CVE-2026-109340: Missing Authorization5.4 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109339: Allocation of Resources Without Limits or Throttling4.9 Medium6.9 Medium0%Oct 12, 2026
CVE-2026-109338: Uncaught Exception6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109337: Observable Discrepancy4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109336: Incorrect Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109335: Exposure of Sensitive Information to an Unauthorized Actor6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109334: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Oct 12, 2026
CVE-2026-109333: Missing Authorization6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109332: Origin Validation Error3.1 Low2.3 Low0%Oct 12, 2026
CVE-2026-109331: Interpretation Conflict7.4 High7.5 High0%Oct 12, 2026
CVE-2026-109330: Missing Origin Validation in WebSockets4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109329: Authorization Bypass Through User-Controlled Key6.5 Medium8.5 High0%Oct 12, 2026
CVE-2026-109328: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109327: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 12, 2026
CVE-2026-109326: Exposure of Version-Control Repository to an Unauthorized Control Sphere7.5 High8.7 High0%Oct 12, 2026
CVE-2026-109325: Exposure of Sensitive Information to an Unauthorized Actor7.5 High8.7 High0%Oct 12, 2026
CVE-2026-109324: Improper Handling of Highly Compressed Data (Data Amplification)6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109323: Missing Authorization5.3 Medium6.9 Medium0%Oct 12, 2026
CVE-2026-109322: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109321: Use of Weak Credentials9.1 Critical9.3 Critical0%Oct 12, 2026
CVE-2026-109320: Insufficient Session Expiration5.4 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109319: Missing Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
9226-9250 of 530113
‹›