The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-107474: Insufficiently Protected CredentialsN/AN/A0%Nov 9, 2026
CVE-2026-101031: Improper Neutralization of Special Elements used in an OS CommandN/AN/A0%Nov 9, 2026
CVE-2026-119483: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 9, 2026
CVE-2026-119497: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 9, 2026
CVE-2026-119505: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 9, 2026
CVE-2026-123463: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 9, 2026
CVE-2026-121763: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 9, 2026
CVE-2026-66675: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 9, 2026
CVE-2026-119514: Incorrect Privilege Assignment6.3 MediumN/A0%Nov 9, 2026
CVE-2026-123484: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 9, 2026
CVE-2026-121764: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 9, 2026
CVE-2026-119504: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 9, 2026
CVE-2026-119503: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.5 MediumN/A0%Nov 9, 2026
CVE-2026-54863: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 9, 2026
CVE-2026-123465: Exposure of Sensitive System Information to an Unauthorized Control Sphere7.5 HighN/A0%Nov 9, 2026
CVE-2026-121780: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 9, 2026
CVE-2026-111403: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 9, 2026
CVE-2026-121760: Missing Authorization7.5 HighN/A0%Nov 9, 2026
CVE-2026-124587: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-94249: Missing Authorization8.1 HighN/A0%Nov 9, 2026
CVE-2026-92606: Time-of-check Time-of-use (TOCTOU) Race Condition6.0 MediumN/A0%Nov 9, 2026
CVE-2026-124585: Improper Neutralization of Special Elements used in an OS Command9.9 Critical8.6 High2%Nov 9, 2026
CVE-2026-124584: UNIX Symbolic Link (Symlink) Following4.4 Medium4.8 Medium0%Nov 9, 2026
CVE-2026-124581: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Nov 9, 2026
CVE-2026-123870: Improper Neutralization of Directives in Dynamically Evaluated CodeN/A9.5 Critical0%Nov 9, 2026
851-875 of 544026