The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-107285: Cleartext Transmission of Sensitive Information5.9 MediumN/A0%Oct 7, 2026
CVE-2026-107282: Cleartext Transmission of Sensitive InformationN/A9.4 Critical0%Oct 7, 2026
CVE-2026-107232: Cleartext Transmission of Sensitive Information7.5 HighN/A0%Oct 7, 2026
CVE-2026-76275: Improper Authorization4.3 MediumN/A0%Oct 7, 2026
CVE-2026-76265: Improper Access Control6.5 MediumN/A0%Oct 7, 2026
CVE-2026-107352: Missing Authorization7.7 High6.3 Medium0%Oct 7, 2026
CVE-2026-96335: Missing Authorization7.5 HighN/A0%Oct 7, 2026
CVE-2026-46437: Improper Authentication4.8 MediumN/A0%Oct 7, 2026
CVE-2026-105139: Incorrect Authorization4.3 Medium5.3 Medium0%Oct 7, 2026
CVE-2026-27434: Missing Authorization5.3 MediumN/A0%Oct 7, 2026
CVE-2026-105876: Missing Authorization5.3 MediumN/A0%Oct 7, 2026
CVE-2026-104390: Missing Authorization4.3 MediumN/A0%Oct 7, 2026
CVE-2026-103075: Missing Authorization4.3 MediumN/A0%Oct 7, 2026
CVE-2026-104651: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 7, 2026
CVE-2026-103323: Missing Authorization5.9 MediumN/A0%Oct 7, 2026
CVE-2026-81535: Missing Authorization9.1 Critical6.3 Medium0%Oct 7, 2026
CVE-2026-106471: Incorrect Authorization8.1 HighN/A0%Oct 7, 2026
CVE-2026-93678: Authorization Bypass Through User-Controlled Key7.6 HighN/A0%Oct 7, 2026
CVE-2026-106503: Improper Handling of Case Sensitivity8.1 HighN/A0%Oct 6, 2026
CVE-2026-106489: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Oct 6, 2026
CVE-2026-106463: Incorrect Authorization5.4 MediumN/A0%Oct 6, 2026
CVE-2026-106461: Incorrect Authorization4.3 MediumN/A0%Oct 6, 2026
CVE-2026-105811: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 6, 2026
CVE-2026-79809: Improper Limitation of a Pathname to a Restricted Directory7.3 HighN/A0%Oct 6, 2026
CVE-2026-106448: Improperly Controlled Modification of Object Prototype AttributesN/A8.9 High0%Oct 6, 2026
976-1000 of 12074
‹›