The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116070: Missing Authentication for Critical Function6.5 Medium6.9 Medium0%Oct 25, 2026
CVE-2026-116069: Server-Side Request Forgery (SSRF)6.5 Medium6.9 Medium0%Oct 25, 2026
CVE-2026-116068: Authorization Bypass Through User-Controlled Key8.8 High8.7 High0%Oct 25, 2026
CVE-2026-116067: Improper Limitation of a Pathname to a Restricted Directory8.2 High8.8 High2%Oct 25, 2026
CVE-2026-116066: Server-Side Request Forgery (SSRF)6.8 Medium7.0 High0%Oct 25, 2026
CVE-2026-116050: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 25, 2026
CVE-2026-116049: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 25, 2026
CVE-2026-116048: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 25, 2026
CVE-2026-116047: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Oct 25, 2026
CVE-2026-116046: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium4.8 Medium0%Oct 25, 2026
CVE-2026-116045: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium2.1 Low0%Oct 25, 2026
CVE-2026-94295: Missing Authorization5.3 MediumN/A0%Oct 25, 2026
CVE-2026-116044: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Oct 25, 2026
CVE-2026-115251: Improper Privilege Management7.2 HighN/A0%Oct 25, 2026
CVE-2026-115214: Improper Privilege Management9.8 CriticalN/A0%Oct 25, 2026
CVE-2026-115183: Insufficient Verification of Data Authenticity2.4 LowN/A0%Oct 25, 2026
CVE-2026-114743: Missing Authorization3.1 LowN/A0%Oct 25, 2026
CVE-2026-114742: Authorization Bypass Through User-Controlled Key2.7 LowN/A0%Oct 25, 2026
CVE-2026-114741: Authorization Bypass Through User-Controlled Key3.8 LowN/A0%Oct 25, 2026
CVE-2026-114740: Missing Authorization4.9 MediumN/A0%Oct 25, 2026
CVE-2026-111981: Missing Authorization2.7 LowN/A0%Oct 25, 2026
CVE-2026-111980: Incorrect Authorization5.5 MediumN/A0%Oct 25, 2026
CVE-2026-111979: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Oct 25, 2026
CVE-2026-111978: Improper Limitation of a Pathname to a Restricted Directory6.0 MediumN/A0%Oct 25, 2026
CVE-2026-111976: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 25, 2026
2401-2425 of 417776