The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-102407: Incorrect Authorization5.4 MediumN/A0%Oct 6, 2026
CVE-2026-102406: Authorization Bypass Through User-Controlled Key8.8 HighN/A0%Oct 6, 2026
CVE-2026-106511: Missing Authentication for Critical Function9.8 CriticalN/A0%Oct 6, 2026
CVE-2026-106442: Incomplete List of Disallowed Inputs7.8 HighN/A0%Oct 6, 2026
CVE-2026-106425: Missing Authorization4.2 MediumN/A0%Oct 6, 2026
CVE-2026-106422: Incorrect Authorization4.3 MediumN/A0%Oct 6, 2026
CVE-2026-106418: Missing Authorization6.5 MediumN/A0%Oct 6, 2026
CVE-2026-106410: Missing Authorization4.2 MediumN/A0%Oct 6, 2026
CVE-2026-106407: Incorrect Authorization6.5 MediumN/A0%Oct 6, 2026
CVE-2026-106406: Missing Authorization5.4 MediumN/A0%Oct 6, 2026
CVE-2026-106404: Incorrect Authorization6.5 MediumN/A0%Oct 6, 2026
CVE-2026-106403: Incorrect Authorization8.1 HighN/A0%Oct 6, 2026
CVE-2026-106402: Incorrect Authorization4.8 MediumN/A0%Oct 6, 2026
CVE-2026-106398: Incorrect Authorization4.3 MediumN/A0%Oct 6, 2026
CVE-2026-106397: Incorrect Authorization6.1 MediumN/A0%Oct 6, 2026
CVE-2026-106391: Incorrect Authorization4.2 MediumN/A0%Oct 6, 2026
CVE-2026-106389: Incorrect Authorization6.5 MediumN/A0%Oct 6, 2026
CVE-2026-106388: Missing Authorization5.3 MediumN/A0%Oct 6, 2026
CVE-2026-106387: Missing Authorization8.8 HighN/A0%Oct 6, 2026
CVE-2026-106384: Missing Authorization6.5 MediumN/A0%Oct 6, 2026
CVE-2026-106381: Incorrect Authorization6.5 MediumN/A0%Oct 6, 2026
CVE-2026-106372: Incorrect Authorization9.6 CriticalN/A0%Oct 6, 2026
CVE-2026-106371: Incorrect Authorization8.8 HighN/A0%Oct 6, 2026
CVE-2026-106369: Missing Authorization4.2 MediumN/A0%Oct 6, 2026
CVE-2026-106367: Missing Authorization8.4 HighN/A0%Oct 6, 2026
1001-1025 of 12070