The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-124850: Improper Neutralization of Special Elements used in an SQL CommandN/A7.3 High0%Nov 9, 2026
CVE-2026-16283: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Nov 9, 2026
CVE-2026-124635: Unrestricted Upload of File with Dangerous Type4.7 Medium5.1 Medium0%Nov 9, 2026
CVE-2026-124625: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124624: Use of Hard-coded Credentials5.3 Medium5.5 Medium0%Nov 9, 2026
CVE-2026-121843: Undefined Security Weakness8.8 HighN/A0%Nov 9, 2026
CVE-2026-121842: Undefined Security Weakness8.8 HighN/A0%Nov 9, 2026
CVE-2026-121841: Undefined Security WeaknessN/AN/A0%Nov 9, 2026
CVE-2026-119743: Use of Cache Containing Sensitive Information4.8 Medium6.3 Medium0%Nov 9, 2026
CVE-2026-119274: Improper Input Validation4.8 MediumN/A0%Nov 9, 2026
CVE-2026-124636: Improper Limitation of a Pathname to a Restricted Directory3.8 Low5.1 Medium0%Nov 9, 2026
CVE-2026-95779: Exposure of Sensitive Information to an Unauthorized Actor8.8 HighN/A0%Nov 9, 2026
CVE-2026-95778: Undefined Security Weakness8.8 HighN/A1%Nov 9, 2026
CVE-2026-95648: Improperly Controlled Modification of Dynamically-Determined Object Attributes8.1 HighN/A0%Nov 9, 2026
CVE-2026-94434: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Nov 9, 2026
CVE-2026-124622: Time-of-check Time-of-use (TOCTOU) Race Condition5.3 Medium4.8 Medium0%Nov 9, 2026
CVE-2026-124079: Deserialization of Untrusted Data9.8 Critical9.3 Critical1%Nov 9, 2026
CVE-2026-121611: Use of Uninitialized Variable6.5 MediumN/A1%Nov 9, 2026
CVE-2026-119613: Generation of Error Message Containing Sensitive InformationN/A5.3 Medium0%Nov 9, 2026
CVE-2026-119610: Out-of-bounds Read8.2 HighN/A1%Nov 9, 2026
CVE-2026-118792: Use of Default CredentialsN/A6.1 Medium0%Nov 9, 2026
CVE-2026-118791: Download of Code Without Integrity CheckN/A7.2 High0%Nov 9, 2026
CVE-2026-118790: Use of Hard-coded CredentialsN/A7.2 High0%Nov 9, 2026
CVE-2026-112171: Improper Neutralization of Special Elements used in an SQL CommandN/A4.4 Medium0%Nov 9, 2026
CVE-2026-112170: Missing Authentication for Critical FunctionN/A6.3 Medium0%Nov 9, 2026
751-775 of 419945