The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-121611: Use of Uninitialized Variable6.5 MediumN/A1%Nov 9, 2026
CVE-2026-119613: Generation of Error Message Containing Sensitive InformationN/A5.3 Medium0%Nov 9, 2026
CVE-2026-119610: Out-of-bounds Read8.2 HighN/A1%Nov 9, 2026
CVE-2026-118792: Use of Default CredentialsN/A6.1 Medium0%Nov 9, 2026
CVE-2026-118791: Download of Code Without Integrity CheckN/A7.2 High0%Nov 9, 2026
CVE-2026-118790: Use of Hard-coded CredentialsN/A7.2 High0%Nov 9, 2026
CVE-2026-112171: Improper Neutralization of Special Elements used in an SQL CommandN/A4.4 Medium0%Nov 9, 2026
CVE-2026-112170: Missing Authentication for Critical FunctionN/A6.3 Medium0%Nov 9, 2026
CVE-2026-112169: Authentication Bypass Using an Alternate Path or ChannelN/A6.1 Medium0%Nov 9, 2026
CVE-2026-112168: Cleartext Storage of Sensitive InformationN/A6.0 Medium0%Nov 9, 2026
CVE-2026-121601: Out-of-bounds Read6.1 MediumN/A0%Nov 9, 2026
CVE-2026-124623: Unrestricted Upload of File with Dangerous Type4.7 Medium2.0 Low0%Nov 9, 2026
CVE-2026-122673: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 9, 2026
CVE-2026-112205: Improper Restriction of Excessive Authentication AttemptsN/A6.9 Medium0%Nov 9, 2026
CVE-2026-112204: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Nov 9, 2026
CVE-2026-110469: Unrestricted Upload of File with Dangerous TypeN/A10.0 Critical1%Nov 9, 2026
CVE-2026-110468: Unrestricted Upload of File with Dangerous TypeN/A10.0 Critical1%Nov 9, 2026
CVE-2026-124684: Use After Free5.1 MediumN/A0%Nov 9, 2026
CVE-2026-121629: External Control of File Name or Path7.5 HighN/A1%Nov 9, 2026
CVE-2026-118468: Improper Restriction of XML External Entity ReferenceN/A7.2 High0%Nov 9, 2026
CVE-2026-118467: Insertion of Sensitive Information into Log FileN/A4.3 Medium0%Nov 9, 2026
CVE-2026-118465: Use of Hard-coded CredentialsN/A5.8 Medium0%Nov 9, 2026
CVE-2026-118464: Use of Hard-coded Cryptographic KeyN/A5.8 Medium0%Nov 9, 2026
CVE-2026-118462: Download of Code Without Integrity CheckN/A9.2 Critical0%Nov 9, 2026
CVE-2026-118461: Missing Authentication for Critical FunctionN/A8.0 High0%Nov 9, 2026
701-725 of 517528