The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-107793: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 8, 2026
CVE-2026-107792: Missing Authorization4.3 Medium5.3 Medium0%Oct 8, 2026
CVE-2026-107725: Missing AuthorizationN/A8.7 High0%Oct 8, 2026
CVE-2026-107722: Improper Verification of Cryptographic Signature9.8 CriticalN/A0%Oct 8, 2026
CVE-2026-107720: Improper Input Validation7.4 HighN/A0%Oct 8, 2026
CVE-2026-107715: Exposure of Sensitive Information to an Unauthorized Actor6.8 MediumN/A0%Oct 8, 2026
CVE-2026-107714: Exposure of Sensitive Information to an Unauthorized Actor5.9 MediumN/A0%Oct 8, 2026
CVE-2026-94510: Authorization Bypass Through User-Controlled Key9.9 CriticalN/A0%Oct 8, 2026
CVE-2026-83947: Missing Authorization7.7 HighN/A0%Oct 8, 2026
CVE-2026-69435: Server-Side Request Forgery (SSRF)9.6 CriticalN/A0%Oct 8, 2026
CVE-2026-11930: Improper Authorization7.5 HighN/A0%Oct 8, 2026
CVE-2026-107782: Incorrect Authorization7.8 High8.5 High0%Oct 8, 2026
CVE-2026-107781: Server-Side Request Forgery (SSRF)7.4 High9.1 Critical0%Oct 8, 2026
CVE-2026-107706: Incorrect Authorization4.3 Medium5.3 Medium0%Oct 8, 2026
CVE-2026-107701: Improperly Controlled Modification of Object Prototype Attributes8.2 High8.8 High0%Oct 8, 2026
CVE-2026-107702: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 8, 2026
CVE-2026-107333: Incorrect Authorization8.1 HighN/A1%Oct 8, 2026
CVE-2026-50054: Improper Privilege Management7.1 HighN/A0%Oct 8, 2026
CVE-2026-10631: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Oct 8, 2026
CVE-2026-14273: Incorrect Authorization6.5 MediumN/A0%Oct 8, 2026
CVE-2026-12859: Missing Authorization6.5 MediumN/A0%Oct 8, 2026
CVE-2026-107637: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 8, 2026
CVE-2026-62128: Missing Authorization5.3 MediumN/A0%Oct 8, 2026
CVE-2026-16181: Improper Authorization7.4 HighN/A0%Oct 8, 2026
CVE-2026-106603: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Oct 8, 2026
926-950 of 12080