The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-124450: External Control of File Name or Path9.9 Critical9.3 Critical0%Nov 8, 2026
CVE-2026-124449: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-124448: Improper Neutralization of Input During Web Page Generation7.6 High8.6 High0%Nov 8, 2026
CVE-2026-124447: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Nov 8, 2026
CVE-2026-124446: External Control of File Name or Path8.8 High8.7 High0%Nov 8, 2026
CVE-2026-124445: Improper Restriction of Excessive Authentication Attempts9.8 Critical9.3 Critical0%Nov 8, 2026
CVE-2026-124443: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-124442: Server-Side Request Forgery (SSRF)6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-124441: Incorrect Authorization8.8 High8.7 High0%Nov 8, 2026
CVE-2026-124439: Uncontrolled Recursion7.5 High8.7 High0%Nov 8, 2026
CVE-2026-124438: Exposure of Sensitive Information to an Unauthorized Actor7.4 High9.1 Critical0%Nov 8, 2026
CVE-2026-124437: Uncontrolled Resource Consumption7.5 High8.7 High0%Nov 8, 2026
CVE-2026-124435: Improper Neutralization of Input During Web Page Generation4.8 Medium4.6 Medium0%Nov 8, 2026
CVE-2026-124434: Exposure of Sensitive Information to an Unauthorized Actor7.1 High7.1 High0%Nov 8, 2026
CVE-2026-124433: Incorrect Authorization6.5 Medium7.0 High0%Nov 8, 2026
CVE-2026-124431: Missing Authorization4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-124430: Improper Neutralization of Special Elements Used in a Template Engine8.8 High8.7 High1%Nov 8, 2026
CVE-2026-124429: Incorrect Privilege Assignment7.5 High8.7 High0%Nov 8, 2026
CVE-2026-124427: Missing Authorization9.8 Critical9.3 Critical0%Nov 8, 2026
CVE-2026-124426: Missing Authorization5.3 Medium6.9 Medium0%Nov 8, 2026
CVE-2026-124425: Observable Discrepancy3.1 Low2.3 Low0%Nov 8, 2026
CVE-2026-124331: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Nov 8, 2026
CVE-2026-124466: Server-Side Request Forgery (SSRF)7.2 High6.9 Medium0%Nov 8, 2026
CVE-2026-124444: Improper Neutralization of Special Elements used in an SQL Command7.1 High7.1 High0%Nov 8, 2026
CVE-2026-124440: Unintended Proxy or Intermediary9.9 Critical9.4 Critical1%Nov 8, 2026
951-975 of 420168