The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-104403: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Oct 2, 2026
CVE-2026-80337: Missing Authorization5.3 MediumN/A0%Oct 2, 2026
CVE-2026-85005: Missing Authorization5.4 MediumN/A0%Oct 2, 2026
CVE-2026-90988: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 2, 2026
CVE-2026-104054: Missing Authorization6.3 Medium2.1 Low0%Oct 2, 2026
CVE-2026-51879: Authorization Bypass Through User-Controlled Key9.1 CriticalN/A0%Oct 1, 2026
CVE-2026-51878: Improper Access Control4.3 MediumN/A0%Oct 1, 2026
CVE-2026-51876: Improper Authorization9.1 CriticalN/A0%Oct 1, 2026
CVE-2026-104356: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)5.9 Medium8.2 High0%Oct 1, 2026
CVE-2026-104183: Improperly Controlled Modification of Object Prototype Attributes5.1 MediumN/A0%Oct 1, 2026
CVE-2026-56098: Observable Discrepancy4.3 MediumN/A0%Oct 1, 2026
CVE-2026-48005: Missing Authentication for Critical Function7.5 HighN/A1%Oct 1, 2026
CVE-2026-101322: Insertion of Sensitive Information Into Sent DataN/A8.3 High0%Oct 1, 2026
CVE-2026-97280: Missing Authorization6.5 MediumN/A0%Oct 1, 2026
CVE-2026-62063: Missing Authorization5.4 MediumN/A0%Oct 1, 2026
CVE-2026-62061: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Oct 1, 2026
CVE-2026-103341: Missing Authorization5.3 MediumN/A0%Oct 1, 2026
CVE-2026-103340: Missing Authorization5.3 MediumN/A0%Oct 1, 2026
CVE-2026-102390: Missing Authorization5.3 MediumN/A0%Oct 1, 2026
CVE-2026-102382: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 1, 2026
CVE-2026-102381: Missing Authorization5.3 MediumN/A0%Oct 1, 2026
CVE-2026-94276: Improper AuthenticationN/A5.1 Medium0%Oct 1, 2026
CVE-2026-94269: Use of Non-Canonical URL Paths for Authorization DecisionsN/A6.3 Medium0%Oct 1, 2026
CVE-2026-103858: Improper AuthorizationN/A5.3 Medium0%Oct 1, 2026
CVE-2026-82806: Exposure of Data Element to Wrong SessionN/A5.3 Medium0%Oct 1, 2026
1176-1200 of 12060
‹›