The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-124509: Improper Limitation of a Pathname to a Restricted Directory7.3 High5.5 Medium1%Nov 9, 2026
CVE-2026-124508: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium5.5 Medium1%Nov 9, 2026
CVE-2026-124507: Server-Side Request Forgery (SSRF)5.3 Medium5.5 Medium0%Nov 9, 2026
CVE-2026-124506: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124505: URL Redirection to Untrusted Site4.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124504: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-119506: Incorrect Privilege Assignment9.1 CriticalN/A0%Nov 9, 2026
CVE-2026-124502: Missing Authorization4.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124501: Improper Privilege Management7.3 High5.5 Medium0%Nov 9, 2026
CVE-2026-124500: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124499: Improper Control of Generation of Code4.7 Medium2.0 Low0%Nov 9, 2026
CVE-2026-124498: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Nov 8, 2026
CVE-2026-96146: IBM SevOne Network Performance Management: IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial of…7.5 HighN/A0%Nov 8, 2026
CVE-2026-95867: IBM SevOne Network Performance Management: IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code…6.7 MediumN/A0%Nov 8, 2026
CVE-2026-17427: Reachable Assertion6.5 MediumN/A0%Nov 8, 2026
CVE-2026-16697: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Nov 8, 2026
CVE-2026-16682: Use of Uninitialized Resource6.5 MediumN/A0%Nov 8, 2026
CVE-2026-118904: Improper Authentication8.1 HighN/A0%Nov 8, 2026
CVE-2026-97677: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-controlled file content into…8.1 HighN/A0%Nov 8, 2026
CVE-2026-93879: IBM Hibernate Validator: Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption…7.5 HighN/A0%Nov 8, 2026
CVE-2026-93005: IBM Process Mining: IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated attacker to cause a denial of service through…6.5 MediumN/A0%Nov 8, 2026
CVE-2026-8860: IBM: IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for…6.5 MediumN/A0%Nov 8, 2026
CVE-2026-8642: IBM: IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 exposes debug endpoints that…4.3 MediumN/A0%Nov 8, 2026
CVE-2026-8640: IBM: IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 does not set the SameSite attribute…3.5 LowN/A0%Nov 8, 2026
CVE-2026-8639: IBM: IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 is vulnerable to session fixation8.8 HighN/A0%Nov 8, 2026
801-825 of 419424