The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-108147: Allocation of Resources Without Limits or Throttling5.3 Medium6.9 Medium1%Nov 3, 2026
CVE-2026-43603: NULL Pointer DereferenceN/A6.9 Medium0%Nov 3, 2026
CVE-2026-40661: Out-of-bounds WriteN/A5.2 Medium0%Nov 3, 2026
CVE-2026-40660: Out-of-bounds ReadN/A5.2 Medium0%Nov 3, 2026
CVE-2026-40659: Integer Overflow or WraparoundN/A5.1 Medium0%Nov 3, 2026
CVE-2026-40652: Out-of-bounds ReadN/A5.2 Medium0%Nov 3, 2026
CVE-2026-121513: Out-of-bounds Write7.5 HighN/A0%Nov 3, 2026
CVE-2026-121512: Missing Release of Memory after Effective Lifetime7.5 HighN/A0%Nov 3, 2026
CVE-2026-121511: Out-of-bounds Read7.1 HighN/A0%Nov 3, 2026
CVE-2026-121510: Out-of-bounds Write7.5 HighN/A0%Nov 3, 2026
CVE-2026-121508: Use After Free5.9 MediumN/A0%Nov 3, 2026
CVE-2026-121507: Double Free5.9 MediumN/A0%Nov 3, 2026
CVE-2026-121506: Out-of-bounds Write7.4 HighN/A0%Nov 3, 2026
CVE-2026-121505: Out-of-bounds Read3.7 LowN/A0%Nov 3, 2026
CVE-2026-121449: Exposure of Sensitive Information to an Unauthorized Actor6.5 Medium7.1 High0%Nov 3, 2026
CVE-2026-121448: Improper Limitation of a Pathname to a Restricted Directory8.3 High8.7 High0%Nov 3, 2026
CVE-2026-121447: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121446: Incomplete Filtering of Special Elements4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121445: Improper Check for Unusual or Exceptional Conditions5.9 Medium8.2 High0%Nov 3, 2026
CVE-2026-121444: Uncontrolled Resource Consumption7.5 High8.7 High0%Nov 3, 2026
CVE-2026-121443: Uncaught Exception5.3 Medium6.9 Medium0%Nov 3, 2026
CVE-2026-121442: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121441: Inconsistent Interpretation of HTTP Requests3.7 Low6.3 Medium0%Nov 3, 2026
CVE-2026-121440: Improper Protection of Alternate Path3.7 Low6.3 Medium0%Nov 3, 2026
CVE-2026-121439: Inconsistent Interpretation of HTTP Requests5.3 Medium6.9 Medium0%Nov 3, 2026
876-900 of 418286