The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-123801: Authentication Bypass by Capture-replay7.4 HighN/AN/ANov 9, 2026
CVE-2026-123800: Authorization Bypass Through User-Controlled Key9.9 CriticalN/AN/ANov 9, 2026
CVE-2026-123798: Improper Authentication8.1 HighN/AN/ANov 9, 2026
CVE-2026-121769: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/AN/ANov 9, 2026
CVE-2026-121573: Improper Neutralization of Input During Web Page Generation6.5 MediumN/AN/ANov 9, 2026
CVE-2026-120834: Incorrect Privilege Assignment7.3 HighN/AN/ANov 9, 2026
CVE-2026-119079: Incorrect Behavior Order: Early Amplification7.5 HighN/AN/ANov 9, 2026
CVE-2026-112323: Missing Release of Resource after Effective Lifetime7.5 HighN/AN/ANov 9, 2026
CVE-2026-112320: Missing Release of Resource after Effective Lifetime7.5 HighN/AN/ANov 9, 2026
CVE-2026-112319: Allocation of Resources Without Limits or Throttling6.5 MediumN/AN/ANov 9, 2026
CVE-2026-112318: NULL Pointer Dereference6.5 MediumN/AN/ANov 9, 2026
CVE-2026-112317: Missing Release of Resource after Effective Lifetime5.3 MediumN/AN/ANov 9, 2026
CVE-2026-112315: Missing Release of Resource after Effective Lifetime5.3 MediumN/AN/ANov 9, 2026
CVE-2026-112314: Missing Release of Resource after Effective Lifetime7.5 HighN/AN/ANov 9, 2026
CVE-2026-125264: Unchecked Input for Loop Condition5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125263: Memory Allocation with Excessive Size Value4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125258: Divide By Zero4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125254: Divide By Zero5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125252: Missing Release of Memory after Effective Lifetime4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125246: Reachable Assertion4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125245: Missing Release of Memory after Effective Lifetime4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125242: Missing Release of Memory after Effective Lifetime4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125240: Missing Release of Memory after Effective Lifetime5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125238: Reachable Assertion5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125237: Reachable Assertion4.7 Medium5.7 MediumN/ANov 9, 2026
501-525 of 420168