The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-113363: Exposed Dangerous Method or FunctionN/A9.3 Critical1%Nov 9, 2026
CVE-2026-124610: Undefined Security WeaknessN/AN/AN/ANov 9, 2026
CVE-2026-124564: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium5.5 Medium1%Nov 9, 2026
CVE-2026-124563: Buffer Copy without Checking Size of Input7.5 High7.7 High1%Nov 9, 2026
CVE-2026-124562: Buffer Copy without Checking Size of Input7.5 High7.7 High1%Nov 9, 2026
CVE-2026-124561: Stack-based Buffer Overflow7.5 High7.7 High1%Nov 9, 2026
CVE-2026-113362: Incorrect Default PermissionsN/A8.5 High0%Nov 9, 2026
CVE-2026-124560: Heap-based Buffer Overflow9.8 Critical8.9 High1%Nov 9, 2026
CVE-2026-124558: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Nov 9, 2026
CVE-2026-124557: Improper Limitation of a Pathname to a Restricted Directory7.3 High5.5 Medium1%Nov 9, 2026
CVE-2026-124556: URL Redirection to Untrusted Site4.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-121825: URL Redirection to Untrusted Site6.1 Medium5.1 Medium0%Nov 9, 2026
CVE-2026-124555: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124554: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Nov 9, 2026
CVE-2026-124509: Improper Limitation of a Pathname to a Restricted Directory7.3 High5.5 Medium1%Nov 9, 2026
CVE-2026-124508: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium5.5 Medium1%Nov 9, 2026
CVE-2026-124507: Server-Side Request Forgery (SSRF)5.3 Medium5.5 Medium0%Nov 9, 2026
CVE-2026-124506: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124505: URL Redirection to Untrusted Site4.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124504: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-119506: Incorrect Privilege Assignment9.1 CriticalN/A0%Nov 9, 2026
CVE-2026-124502: Missing Authorization4.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124501: Improper Privilege Management7.3 High5.5 Medium0%Nov 9, 2026
CVE-2026-124500: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124499: Improper Control of Generation of Code4.7 Medium2.0 Low0%Nov 9, 2026
851-875 of 517528