The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-122056: Out-of-bounds Write5.9 MediumN/AN/ANov 9, 2026
CVE-2026-124992: Improper Neutralization of Escape, Meta, or Control Sequences3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-119759: Authorization Bypass Through User-Controlled Key8.1 High8.6 HighN/ANov 9, 2026
CVE-2026-113971: Undefined Security WeaknessN/AN/AN/ANov 9, 2026
CVE-2026-113969: Undefined Security WeaknessN/AN/AN/ANov 9, 2026
CVE-2026-113968: Undefined Security WeaknessN/AN/AN/ANov 9, 2026
CVE-2026-113965: Undefined Security WeaknessN/AN/AN/ANov 9, 2026
CVE-2026-113964: Undefined Security WeaknessN/AN/AN/ANov 9, 2026
CVE-2026-113963: Undefined Security WeaknessN/AN/AN/ANov 9, 2026
CVE-2026-113961: Undefined Security WeaknessN/AN/AN/ANov 9, 2026
CVE-2026-113960: Undefined Security WeaknessN/AN/AN/ANov 9, 2026
CVE-2026-56712: Server-Side Request Forgery (SSRF)8.5 High6.3 MediumN/ANov 9, 2026
CVE-2026-123806: Improper Handling of Case Sensitivity4.0 MediumN/AN/ANov 9, 2026
CVE-2026-87857: Authorization Bypass Through User-Controlled KeyN/A5.3 MediumN/ANov 9, 2026
CVE-2026-125270: Out-of-bounds Read5.3 Medium5.8 MediumN/ANov 9, 2026
CVE-2026-125269: Double Free7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125268: Use of Uninitialized Resource3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125267: Integer Overflow or Wraparound7.8 High8.5 HighN/ANov 9, 2026
CVE-2026-125266: Use of Uninitialized Resource3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125265: Use After Free5.3 Medium5.8 MediumN/ANov 9, 2026
CVE-2026-125262: Out-of-bounds Write7.8 High8.5 HighN/ANov 9, 2026
CVE-2026-125261: Out-of-bounds Read6.1 Medium6.9 MediumN/ANov 9, 2026
CVE-2026-125260: Heap-based Buffer Overflow7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125259: Integer Overflow or Wraparound7.8 High8.5 HighN/ANov 9, 2026
CVE-2026-125257: Off-by-one Error7.0 High7.3 HighN/ANov 9, 2026
401-425 of 420168