The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-114192: Missing Authorization6.5 MediumN/A0%Oct 24, 2026
CVE-2026-114191: Missing Authorization7.5 HighN/A0%Oct 24, 2026
CVE-2026-115932: Improper Limitation of a Pathname to a Restricted Directory9.6 CriticalN/A0%Oct 24, 2026
CVE-2026-116020: Incorrect Authorization5.4 Medium5.3 Medium0%Oct 24, 2026
CVE-2026-116019: Exposed Dangerous Method or Function8.8 High8.7 High0%Oct 24, 2026
CVE-2026-116018: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 24, 2026
CVE-2026-116017: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 24, 2026
CVE-2026-116016: Reliance on Untrusted Inputs in a Security Decision7.1 High7.1 High0%Oct 24, 2026
CVE-2026-116015: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 24, 2026
CVE-2026-116014: Integer Overflow or Wraparound8.1 High9.2 Critical0%Oct 24, 2026
CVE-2026-116013: Improper Handling of Length Parameter Inconsistency3.7 Low6.3 Medium0%Oct 24, 2026
CVE-2026-116012: Numeric Truncation Error3.6 Low2.0 Low0%Oct 24, 2026
CVE-2026-116011: Uncontrolled Recursion7.5 High8.7 High1%Oct 24, 2026
CVE-2026-116010: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 24, 2026
CVE-2026-116009: Improper Limitation of a Pathname to a Restricted Directory8.8 High8.7 High0%Oct 24, 2026
CVE-2026-116008: Missing Authorization4.3 Medium5.3 Medium0%Oct 24, 2026
CVE-2026-110018: Improper Privilege Management8.8 HighN/A0%Oct 24, 2026
CVE-2026-115998: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 24, 2026
CVE-2026-115994: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Oct 24, 2026
CVE-2026-114705: Missing Authorization6.5 MediumN/A0%Oct 24, 2026
CVE-2026-114194: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 24, 2026
CVE-2026-115993: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Oct 24, 2026
CVE-2026-94075: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 24, 2026
CVE-2026-115975: Missing Authorization7.1 HighN/A0%Oct 24, 2026
CVE-2026-114697: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 24, 2026
2451-2475 of 417776