The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-82440: Use of Externally-Controlled Input to Select Classes or CodeN/AN/AN/ANov 9, 2026
CVE-2026-82436: Deserialization of Untrusted DataN/AN/AN/ANov 9, 2026
CVE-2026-82337: Deserialization of Untrusted DataN/AN/AN/ANov 9, 2026
CVE-2026-76185: Exposure of Resource to Wrong SphereN/AN/AN/ANov 9, 2026
CVE-2026-68982: Missing Authentication for Critical FunctionN/AN/AN/ANov 9, 2026
CVE-2026-50204: Cleartext Storage of Sensitive InformationN/AN/AN/ANov 9, 2026
CVE-2026-40913: Improper AuthorizationN/AN/AN/ANov 9, 2026
CVE-2026-124637: Improper Neutralization of Input During Web Page GenerationN/A5.3 MediumN/ANov 9, 2026
CVE-2026-124589: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 LowN/ANov 9, 2026
CVE-2026-124588: Improper Control of Generation of Code6.3 Medium2.1 LowN/ANov 9, 2026
CVE-2026-124586: Out-of-bounds Read7.3 High5.5 MediumN/ANov 9, 2026
CVE-2026-113508: Insufficient Session ExpirationN/AN/AN/ANov 9, 2026
CVE-2026-113504: Exposure of Sensitive System Information to an Unauthorized Control SphereN/AN/AN/ANov 9, 2026
CVE-2026-111455: Incorrect AuthorizationN/AN/AN/ANov 9, 2026
CVE-2026-111454: Exposure of Sensitive Information to an Unauthorized ActorN/AN/AN/ANov 9, 2026
CVE-2026-111452: Insufficiently Protected CredentialsN/AN/AN/ANov 9, 2026
CVE-2026-111395: Deserialization of Untrusted DataN/AN/AN/ANov 9, 2026
CVE-2026-107474: Insufficiently Protected CredentialsN/AN/AN/ANov 9, 2026
CVE-2026-101031: Improper Neutralization of Special Elements used in an OS CommandN/AN/AN/ANov 9, 2026
CVE-2026-119483: Improper Neutralization of Input During Web Page Generation7.1 HighN/AN/ANov 9, 2026
CVE-2026-119497: Improper Neutralization of Input During Web Page Generation6.5 MediumN/AN/ANov 9, 2026
CVE-2026-119505: Improper Neutralization of Input During Web Page Generation7.1 HighN/AN/ANov 9, 2026
CVE-2026-123463: Improper Neutralization of Input During Web Page Generation7.1 HighN/AN/ANov 9, 2026
CVE-2026-121763: Improper Neutralization of Input During Web Page Generation6.5 MediumN/AN/ANov 9, 2026
CVE-2026-66675: Improper Neutralization of Input During Web Page Generation6.5 MediumN/AN/ANov 9, 2026
701-725 of 420168