The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-126128: Auth0 Auth0 Node JS: The Management API client in the Auth0 Node.js SDK improperly neutralizes path parameters, allowing a request and its…N/AN/AN/ANov 10, 2026
CVE-2026-126084: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…4.7 MediumN/AN/ANov 10, 2026
CVE-2026-126083: rails: Action Pack is a framework for handling and responding to web requests7.4 HighN/AN/ANov 10, 2026
CVE-2026-126082: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-126081: rails: Action Pack is a framework for handling and responding to web requests7.5 HighN/AN/ANov 10, 2026
CVE-2026-126080: rails: Active Support is a collection of utility classes and standard library extensions used by Rails and other Ruby projects7.5 HighN/AN/ANov 10, 2026
CVE-2026-126079: rails: Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML6.1 MediumN/AN/ANov 10, 2026
CVE-2026-126078: rails: Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML6.1 MediumN/AN/ANov 10, 2026
CVE-2026-126077: rails: Action Pack is a framework for handling and responding to web requests6.8 MediumN/AN/ANov 10, 2026
CVE-2026-126076: rails: Action Pack is a framework for handling and responding to web requests4.2 MediumN/AN/ANov 10, 2026
CVE-2026-126075: rails: Active Support is a collection of utility classes and standard library extensions used by Rails and other Ruby projects4.7 MediumN/AN/ANov 10, 2026
CVE-2026-126074: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…4.3 MediumN/AN/ANov 10, 2026
CVE-2026-126073: rails: Action Pack is a framework for handling and responding to web requests4.8 MediumN/AN/ANov 10, 2026
CVE-2026-126072: rails: Action Pack is a framework for handling and responding to web requests5.9 MediumN/AN/ANov 10, 2026
CVE-2026-126071: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…5.3 MediumN/AN/ANov 10, 2026
CVE-2026-126070: rails: Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML6.1 MediumN/AN/ANov 10, 2026
CVE-2026-126069: rails: Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML4.7 MediumN/AN/ANov 10, 2026
CVE-2026-126068: rails: Action Mailbox routes incoming emails to controller-like mailboxes for processing in Rails3.7 LowN/AN/ANov 10, 2026
CVE-2026-126067: rails: Action Pack is a framework for handling and responding to web requests3.1 LowN/AN/ANov 10, 2026
CVE-2026-126066: NaturalIntelligence fast-xml-parser: fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks3.7 LowN/AN/ANov 10, 2026
CVE-2026-126065: openobserve: OpenObserve is a cloud-native observability platform9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-126064: sparklemotion nokogiri: Nokogiri is an open source XML and HTML library for the Ruby programming languageN/A2.0 LowN/ANov 10, 2026
CVE-2026-126063: sparklemotion nokogiri: Nokogiri is an open source XML and HTML library for the Ruby programming languageN/A2.3 LowN/ANov 10, 2026
CVE-2026-123263: Adobe After Effects: After Effects is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution…7.8 HighN/AN/ANov 10, 2026
CVE-2026-120828: MongoDB MongoDB Server: A replica-set database server node does not limit or reclaim internal wait records created while handling a…7.5 High8.7 HighN/ANov 10, 2026
251-275 of 424092