The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-116337: Allocation of Resources Without Limits or ThrottlingN/A0.6 Low0%Nov 9, 2026
CVE-2026-111421: Deserialization of Untrusted DataN/AN/A1%Nov 9, 2026
CVE-2026-111453: Incorrect AuthorizationN/AN/A0%Nov 9, 2026
CVE-2026-124582: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium2.1 Low0%Nov 9, 2026
CVE-2026-124580: Improper Neutralization of Special Elements used in an OS Command10.0 Critical9.3 Critical3%Nov 9, 2026
CVE-2026-124579: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.4 High2.1 Low0%Nov 9, 2026
CVE-2026-124577: Improper Authentication9.8 Critical8.9 High2%Nov 9, 2026
CVE-2026-120386: Improper Handling of Structural Elements4.3 Medium5.1 Medium0%Nov 9, 2026
CVE-2026-113437: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium6.9 Medium0%Nov 9, 2026
CVE-2026-109582: Insecure Storage of Sensitive Information4.0 Medium5.1 Medium0%Nov 9, 2026
CVE-2026-124578: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Nov 9, 2026
CVE-2026-81422: Missing Authorization5.3 MediumN/A0%Nov 9, 2026
CVE-2026-124576: Improper Enforcement of Behavioral Workflow7.3 High6.9 Medium0%Nov 9, 2026
CVE-2026-124575: Improper Restriction of Excessive Authentication Attempts3.7 Low6.3 Medium0%Nov 9, 2026
CVE-2026-124573: Missing Authentication for Critical Function7.3 High5.5 Medium0%Nov 9, 2026
CVE-2026-124572: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-123751: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Nov 9, 2026
CVE-2026-123145: Exposure of Sensitive Information to an Unauthorized Actor4.4 MediumN/A0%Nov 9, 2026
CVE-2026-123131: Incorrect Authorization5.9 MediumN/A0%Nov 9, 2026
CVE-2026-123129: Improper Access Control5.3 MediumN/A0%Nov 9, 2026
CVE-2026-123128: Concurrent Execution using Shared Resource with Improper Synchronization3.7 LowN/A0%Nov 9, 2026
CVE-2026-123091: Improper Authentication7.5 HighN/A0%Nov 9, 2026
CVE-2026-123088: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Nov 9, 2026
CVE-2026-123064: Improper Privilege Management8.8 HighN/A0%Nov 9, 2026
CVE-2026-121875: Improper Privilege Management7.2 HighN/A0%Nov 9, 2026
876-900 of 427026