The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-119743: Use of Cache Containing Sensitive Information4.8 Medium6.3 MediumN/ANov 9, 2026
CVE-2026-119274: Improper Input Validation4.8 MediumN/AN/ANov 9, 2026
CVE-2026-124636: Improper Limitation of a Pathname to a Restricted Directory3.8 Low5.1 MediumN/ANov 9, 2026
CVE-2026-95779: Exposure of Sensitive Information to an Unauthorized Actor8.8 HighN/AN/ANov 9, 2026
CVE-2026-95778: Undefined Security Weakness8.8 HighN/AN/ANov 9, 2026
CVE-2026-95648: Improperly Controlled Modification of Dynamically-Determined Object Attributes8.1 HighN/AN/ANov 9, 2026
CVE-2026-124622: Time-of-check Time-of-use (TOCTOU) Race Condition5.3 Medium4.8 MediumN/ANov 9, 2026
CVE-2026-124079: Deserialization of Untrusted Data9.8 Critical9.3 CriticalN/ANov 9, 2026
CVE-2026-121611: Use of Uninitialized Variable6.5 MediumN/AN/ANov 9, 2026
CVE-2026-119613: Generation of Error Message Containing Sensitive InformationN/A5.3 MediumN/ANov 9, 2026
CVE-2026-119610: Out-of-bounds Read8.2 HighN/AN/ANov 9, 2026
CVE-2026-118792: Use of Default CredentialsN/A6.1 MediumN/ANov 9, 2026
CVE-2026-118791: Download of Code Without Integrity CheckN/A7.2 HighN/ANov 9, 2026
CVE-2026-118790: Use of Hard-coded CredentialsN/A7.2 HighN/ANov 9, 2026
CVE-2026-112171: Improper Neutralization of Special Elements used in an SQL CommandN/A4.4 MediumN/ANov 9, 2026
CVE-2026-112170: Missing Authentication for Critical FunctionN/A6.3 MediumN/ANov 9, 2026
CVE-2026-112169: Authentication Bypass Using an Alternate Path or ChannelN/A6.1 MediumN/ANov 9, 2026
CVE-2026-112168: Cleartext Storage of Sensitive InformationN/A6.0 MediumN/ANov 9, 2026
CVE-2026-121601: Out-of-bounds Read6.1 MediumN/AN/ANov 9, 2026
CVE-2026-124623: Unrestricted Upload of File with Dangerous Type4.7 Medium2.0 LowN/ANov 9, 2026
CVE-2026-122673: Improper Neutralization of Input During Web Page Generation6.5 MediumN/AN/ANov 9, 2026
CVE-2026-112205: Improper Restriction of Excessive Authentication AttemptsN/A6.9 MediumN/ANov 9, 2026
CVE-2026-112204: Improper Neutralization of Input During Web Page GenerationN/A5.1 MediumN/ANov 9, 2026
CVE-2026-110469: Unrestricted Upload of File with Dangerous TypeN/A10.0 CriticalN/ANov 9, 2026
CVE-2026-110468: Unrestricted Upload of File with Dangerous TypeN/A10.0 CriticalN/ANov 9, 2026
626-650 of 420168