The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-39723: Missing Authorization7.5 HighN/A0%Oct 6, 2026
CVE-2026-32582: Missing Authorization6.5 MediumN/A0%Oct 6, 2026
CVE-2026-32576: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Oct 6, 2026
CVE-2026-105703: Incorrect Authorization4.7 Medium2.0 Low0%Oct 6, 2026
CVE-2026-105621: Improper Authorization5.4 Medium2.1 Low0%Oct 6, 2026
CVE-2026-105611: Improper Authorization2.7 Low2.0 Low0%Oct 6, 2026
CVE-2026-105610: Improper Authorization4.7 Medium2.0 Low0%Oct 6, 2026
CVE-2026-105572: Authorization Bypass Through User-Controlled Key4.3 Medium2.1 Low0%Oct 6, 2026
CVE-2026-105571: Improper Authorization7.3 High5.5 Medium0%Oct 6, 2026
CVE-2026-104032: Incorrect Behavior Order: Early Amplification5.5 MediumN/A0%Oct 6, 2026
CVE-2026-105786: Missing Authentication for Critical FunctionN/A8.5 High0%Oct 6, 2026
CVE-2026-77226: Incorrect Authorization8.1 High9.2 Critical1%Oct 5, 2026
CVE-2026-103337: Missing Authorization6.5 MediumN/A0%Oct 5, 2026
CVE-2026-97309: Missing AuthorizationN/A7.1 High0%Oct 5, 2026
CVE-2026-97305: Authorization Bypass Through User-Controlled KeyN/A6.9 Medium0%Oct 5, 2026
CVE-2026-97304: Missing Authorization6.5 MediumN/A0%Oct 5, 2026
CVE-2026-97303: Missing Authorization7.6 HighN/A0%Oct 5, 2026
CVE-2026-97070: Authorization Bypass Through User-Controlled KeyN/A6.9 Medium0%Oct 5, 2026
CVE-2026-105634: Improper Privilege Management8.1 HighN/A0%Oct 5, 2026
CVE-2026-103086: Missing Authorization6.5 MediumN/A0%Oct 5, 2026
CVE-2026-102383: Missing Authorization6.5 MediumN/A0%Oct 5, 2026
CVE-2026-104971: Authorization Bypass Through User-Controlled Key8.5 HighN/A0%Oct 5, 2026
CVE-2026-86671: Server-Side Request Forgery (SSRF)N/A8.4 High0%Oct 5, 2026
CVE-2026-105382: Improper Authorization7.3 High5.5 Medium0%Oct 5, 2026
CVE-2026-104891: Authentication Bypass by Spoofing7.5 HighN/A0%Oct 5, 2026
1101-1125 of 12070
‹›