The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118467: Insertion of Sensitive Information into Log FileN/A4.3 Medium0%Nov 9, 2026
CVE-2026-118465: Use of Hard-coded CredentialsN/A5.8 Medium0%Nov 9, 2026
CVE-2026-118464: Use of Hard-coded Cryptographic KeyN/A5.8 Medium0%Nov 9, 2026
CVE-2026-118462: Download of Code Without Integrity CheckN/A9.2 Critical0%Nov 9, 2026
CVE-2026-118461: Missing Authentication for Critical FunctionN/A8.0 High0%Nov 9, 2026
CVE-2026-118460: Use of Hard-coded Cryptographic KeyN/A8.0 High0%Nov 9, 2026
CVE-2026-118459: Weak Password Recovery Mechanism for Forgotten PasswordN/A6.3 Medium0%Nov 9, 2026
CVE-2026-118458: Use of Hard-coded CredentialsN/A8.1 High0%Nov 9, 2026
CVE-2026-118450: Uncontrolled Search Path ElementN/A5.9 Medium0%Nov 9, 2026
CVE-2026-112172: Improper Neutralization of Special Elements used in an SQL CommandN/A8.1 High0%Nov 9, 2026
CVE-2026-120854: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Nov 9, 2026
CVE-2026-120856: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 9, 2026
CVE-2026-118798: Insertion of Sensitive Information into Log FileN/A4.4 Medium0%Nov 9, 2026
CVE-2026-118795: Client-Side Enforcement of Server-Side SecurityN/A5.9 Medium0%Nov 9, 2026
CVE-2026-124621: Improper Authorization7.4 High2.1 Low0%Nov 9, 2026
CVE-2026-124590: Improper Authorization7.3 High5.5 Medium0%Nov 9, 2026
CVE-2026-123779: Direct RequestN/AN/A0%Nov 9, 2026
CVE-2026-123770: Allocation of Resources Without Limits or ThrottlingN/AN/A0%Nov 9, 2026
CVE-2026-123766: Improper Neutralization of Input During Web Page GenerationN/AN/A0%Nov 9, 2026
CVE-2026-123753: Server-Side Request Forgery (SSRF)N/AN/A0%Nov 9, 2026
CVE-2026-120832: Server-Side Request Forgery (SSRF)N/AN/A0%Nov 9, 2026
CVE-2026-120761: Improper Restriction of XML External Entity ReferenceN/AN/A0%Nov 9, 2026
CVE-2026-118196: Incorrect AuthorizationN/AN/A0%Nov 9, 2026
CVE-2026-115252: Improper Control of Generation of Code10.0 CriticalN/A0%Nov 9, 2026
CVE-2026-113702: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Nov 9, 2026
776-800 of 517528