The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-112322: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Nov 9, 2026
CVE-2026-124000: Heap-based Buffer Overflow5.3 Medium6.9 Medium1%Nov 9, 2026
CVE-2026-123799: Insufficient Session Expiration7.4 HighN/A1%Nov 9, 2026
CVE-2026-84503: Improper Neutralization of Argument Delimiters in a Command6.7 MediumN/A0%Nov 9, 2026
CVE-2026-123797: Authentication Bypass Using an Alternate Path or Channel7.5 HighN/A0%Nov 9, 2026
CVE-2026-125063: Inefficient Regular Expression Complexity4.3 MediumN/A0%Nov 9, 2026
CVE-2026-60117: Improper Limitation of a Pathname to a Restricted Directory6.2 Medium6.9 Medium0%Nov 9, 2026
CVE-2026-123796: Exposure of Sensitive Information to an Unauthorized ActorN/A2.3 Low0%Nov 9, 2026
CVE-2026-123373: Improper Link Resolution Before File AccessN/A2.3 Low0%Nov 9, 2026
CVE-2026-123270: Missing Authentication for Critical FunctionN/AN/A1%Nov 9, 2026
CVE-2026-123372: Exposure of Sensitive Information to an Unauthorized ActorN/A2.3 Low0%Nov 9, 2026
CVE-2026-123371: Improper Link Resolution Before File AccessN/A2.3 Low0%Nov 9, 2026
CVE-2026-123370: Off-by-one ErrorN/A5.1 Medium0%Nov 9, 2026
CVE-2026-123369: Improper Output Neutralization for LogsN/A5.3 Medium0%Nov 9, 2026
CVE-2026-119756: Buffer Access with Incorrect Length Value9.8 Critical9.3 Critical0%Nov 9, 2026
CVE-2026-119755: Cross-Site Request Forgery (CSRF)7.5 High7.5 High0%Nov 9, 2026
CVE-2026-123368: Improper Limitation of a Pathname to a Restricted DirectoryN/A2.3 Low0%Nov 9, 2026
CVE-2026-123367: Out-of-bounds Write7.4 HighN/A0%Nov 9, 2026
CVE-2026-19706: Missing Authentication for Critical Function8.3 HighN/A0%Nov 9, 2026
CVE-2026-115338: Cleartext Transmission of Sensitive Information8.1 HighN/A0%Nov 9, 2026
CVE-2026-123364: Improper Neutralization of Input During Web Page GenerationN/A2.4 Low0%Nov 9, 2026
CVE-2026-104989: Uncontrolled Search Path ElementN/A9.3 Critical1%Nov 9, 2026
CVE-2026-121576: Incorrect Privilege Assignment8.8 HighN/A0%Nov 9, 2026
CVE-2026-122664: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 9, 2026
CVE-2026-123482: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 9, 2026
701-725 of 424804