The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-113963: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-113961: Undefined Security WeaknessN/AN/A1%Nov 9, 2026
CVE-2026-113960: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-56712: Server-Side Request Forgery (SSRF)8.5 High6.3 Medium0%Nov 9, 2026
CVE-2026-123806: Improper Handling of Case Sensitivity4.0 MediumN/A0%Nov 9, 2026
CVE-2026-87857: Authorization Bypass Through User-Controlled KeyN/A5.3 Medium0%Nov 9, 2026
CVE-2026-125270: Out-of-bounds Read5.3 Medium5.8 Medium0%Nov 9, 2026
CVE-2026-125269: Double Free7.0 High7.3 High0%Nov 9, 2026
CVE-2026-125268: Use of Uninitialized Resource3.3 Low4.8 Medium0%Nov 9, 2026
CVE-2026-125267: Integer Overflow or Wraparound7.8 High8.5 High0%Nov 9, 2026
CVE-2026-125266: Use of Uninitialized Resource3.3 Low4.8 Medium0%Nov 9, 2026
CVE-2026-125265: Use After Free5.3 Medium5.8 Medium0%Nov 9, 2026
CVE-2026-125262: Out-of-bounds Write7.8 High8.5 High0%Nov 9, 2026
CVE-2026-125261: Out-of-bounds Read6.1 Medium6.9 Medium0%Nov 9, 2026
CVE-2026-125260: Heap-based Buffer Overflow7.0 High7.3 High0%Nov 9, 2026
CVE-2026-125259: Integer Overflow or Wraparound7.8 High8.5 High0%Nov 9, 2026
CVE-2026-125257: Off-by-one Error7.0 High7.3 High0%Nov 9, 2026
CVE-2026-125256: Out-of-bounds Write7.0 High7.3 High0%Nov 9, 2026
CVE-2026-125255: Use After Free5.3 Medium5.8 Medium0%Nov 9, 2026
CVE-2026-125253: Integer Overflow or Wraparound5.3 Medium5.8 Medium0%Nov 9, 2026
CVE-2026-124987: Improper Encoding or Escaping of Output6.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124834: Exposure of Sensitive Information to an Unauthorized Actor3.7 Low6.3 Medium0%Nov 9, 2026
CVE-2026-124077: Improper Neutralization of Null Byte or NUL CharacterN/AN/A0%Nov 9, 2026
CVE-2026-123805: Out-of-bounds Read7.5 HighN/A0%Nov 9, 2026
CVE-2026-119078: Incorrect Provision of Specified FunctionalityN/AN/A0%Nov 9, 2026
476-500 of 517528