The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-121612: Weak Authentication4.3 MediumN/A0%Nov 9, 2026
CVE-2026-115340: Cleartext Storage of Sensitive Information7.1 HighN/A0%Nov 9, 2026
CVE-2026-115339: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Nov 9, 2026
CVE-2026-115341: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A0%Nov 9, 2026
CVE-2026-115337: Incorrect Authorization6.3 MediumN/A0%Nov 9, 2026
CVE-2026-115336: Incorrect Calculation6.5 MediumN/A0%Nov 9, 2026
CVE-2026-112165: Improper Certificate ValidationN/A6.9 Medium0%Nov 9, 2026
CVE-2026-121690: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-121689: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-121688: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-121687: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-121686: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-121685: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-114594: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A5.4 Medium0%Nov 9, 2026
CVE-2026-112164: Use of Hard-coded Cryptographic KeyN/A6.6 Medium0%Nov 9, 2026
CVE-2026-103906: Use of Hard-coded CredentialsN/A7.8 High0%Nov 9, 2026
CVE-2026-124683: Inefficient Algorithmic ComplexityN/A8.7 High0%Nov 9, 2026
CVE-2026-118492: Improper Neutralization of Input During Web Page GenerationN/A2.0 Low0%Nov 9, 2026
CVE-2025-10248: Improper Neutralization of Input During Web Page GenerationN/A7.2 High0%Nov 9, 2026
CVE-2026-19552: Undefined Security WeaknessN/A0.0 None0%Nov 9, 2026
CVE-2026-124249: Origin Validation ErrorN/A6.3 Medium0%Nov 9, 2026
CVE-2026-119474: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Nov 9, 2026
CVE-2026-104620: Relative Path TraversalN/A8.5 High0%Nov 9, 2026
CVE-2026-124959: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-124916: Improper Neutralization of Input During Web Page GenerationN/AN/A0%Nov 9, 2026
726-750 of 423720