The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-112169: Authentication Bypass Using an Alternate Path or ChannelN/A6.1 Medium0%Nov 9, 2026
CVE-2026-112168: Cleartext Storage of Sensitive InformationN/A6.0 Medium0%Nov 9, 2026
CVE-2026-121601: Out-of-bounds Read6.1 MediumN/A0%Nov 9, 2026
CVE-2026-124623: Unrestricted Upload of File with Dangerous Type4.7 Medium2.0 Low0%Nov 9, 2026
CVE-2026-122673: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 9, 2026
CVE-2026-112205: Improper Restriction of Excessive Authentication AttemptsN/A6.9 Medium0%Nov 9, 2026
CVE-2026-112204: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Nov 9, 2026
CVE-2026-110469: Unrestricted Upload of File with Dangerous TypeN/A10.0 Critical1%Nov 9, 2026
CVE-2026-110468: Unrestricted Upload of File with Dangerous TypeN/A10.0 Critical1%Nov 9, 2026
CVE-2026-124684: Use After Free5.1 MediumN/A0%Nov 9, 2026
CVE-2026-121629: External Control of File Name or Path7.5 HighN/A1%Nov 9, 2026
CVE-2026-118468: Improper Restriction of XML External Entity ReferenceN/A7.2 High0%Nov 9, 2026
CVE-2026-118467: Insertion of Sensitive Information into Log FileN/A4.3 Medium0%Nov 9, 2026
CVE-2026-118465: Use of Hard-coded CredentialsN/A5.8 Medium0%Nov 9, 2026
CVE-2026-118464: Use of Hard-coded Cryptographic KeyN/A5.8 Medium0%Nov 9, 2026
CVE-2026-118462: Download of Code Without Integrity CheckN/A9.2 Critical0%Nov 9, 2026
CVE-2026-118461: Missing Authentication for Critical FunctionN/A8.0 High0%Nov 9, 2026
CVE-2026-118460: Use of Hard-coded Cryptographic KeyN/A8.0 High0%Nov 9, 2026
CVE-2026-118459: Weak Password Recovery Mechanism for Forgotten PasswordN/A6.3 Medium0%Nov 9, 2026
CVE-2026-118458: Use of Hard-coded CredentialsN/A8.1 High0%Nov 9, 2026
CVE-2026-118450: Uncontrolled Search Path ElementN/A5.9 Medium0%Nov 9, 2026
CVE-2026-112172: Improper Neutralization of Special Elements used in an SQL CommandN/A8.1 High0%Nov 9, 2026
CVE-2026-120854: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Nov 9, 2026
CVE-2026-120856: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 9, 2026
CVE-2026-118798: Insertion of Sensitive Information into Log FileN/A4.4 Medium0%Nov 9, 2026
776-800 of 426591