The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-63634: tempoxyz pympp: pympp is a Python SDK for the Machine Payments ProtocolN/A6.9 Medium0%Nov 9, 2026
CVE-2026-123810: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability4.3 MediumN/A0%Nov 9, 2026
CVE-2026-63496: electrovir augment-vir: augment-vir is a collection of helper functions7.8 HighN/A0%Nov 9, 2026
CVE-2026-123809: Improper Neutralization of Special Elements Used in a Template Engine4.2 MediumN/A0%Nov 9, 2026
CVE-2026-63497: Improper Neutralization of Special Elements in Output Used by a Downstream ComponentN/A5.3 Medium0%Nov 9, 2026
CVE-2026-124994: Out-of-bounds Read6.3 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-123808: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Nov 9, 2026
CVE-2026-123807: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A1%Nov 9, 2026
CVE-2026-122056: Out-of-bounds Write5.9 MediumN/A0%Nov 9, 2026
CVE-2026-124992: Improper Neutralization of Escape, Meta, or Control Sequences3.3 Low4.8 Medium0%Nov 9, 2026
CVE-2026-119759: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Nov 9, 2026
CVE-2026-113971: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-113969: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-113968: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-113965: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-113964: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-113963: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-113961: Undefined Security WeaknessN/AN/A1%Nov 9, 2026
CVE-2026-113960: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-56712: Server-Side Request Forgery (SSRF)8.5 High6.3 Medium0%Nov 9, 2026
CVE-2026-123806: Improper Handling of Case Sensitivity4.0 MediumN/A0%Nov 9, 2026
CVE-2026-87857: Authorization Bypass Through User-Controlled KeyN/A5.3 Medium0%Nov 9, 2026
CVE-2026-125270: Out-of-bounds Read5.3 Medium5.8 Medium0%Nov 9, 2026
CVE-2026-125269: Double Free7.0 High7.3 High0%Nov 9, 2026
CVE-2026-125267: Integer Overflow or Wraparound7.8 High8.5 High0%Nov 9, 2026
526-550 of 425495