The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-111264: Apache Software Foundation Apache TomEE: The security constraint generated for EJB JAX-WS endpoints with configured authentication protects only some HTTP…N/AN/AN/ANov 10, 2026
CVE-2026-111263: Apache Software Foundation Apache TomEE: Authentication configured for an EJB JAX-WS endpoint in the TomEE deployment descriptor is not enforced when the…N/AN/AN/ANov 10, 2026
CVE-2026-111262: Apache Software Foundation Apache TomEE: The Jakarta Security LDAP identity store does not neutralize special characters in the caller name before using it in…N/AN/AN/ANov 10, 2026
CVE-2026-111260: Apache Software Foundation Apache TomEE: The Jakarta Security OpenID Connect authentication mechanism generates the state and nonce values with a…N/AN/AN/ANov 10, 2026
CVE-2026-111261: Apache Software Foundation Apache TomEE: The Jakarta Security LDAP identity store accepts an empty password as valid if the directory server allows…N/AN/AN/ANov 10, 2026
CVE-2026-82509: vlang v: V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS…7.4 High9.1 CriticalN/ANov 10, 2026
CVE-2026-12708: Cloudflare tokio-quiche: Summary Cloudflare tokio-quiche was found to contain an uncontrolled resource consumption vulnerability in its HTTP/3…N/A8.7 HighN/ANov 10, 2026
CVE-2026-124952: Mozilla Firefox: Use-after-free in the Audio/Video component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124951: Mozilla Firefox: Privilege escalation in the Nimbus Desktop Client componentN/AN/AN/ANov 10, 2026
CVE-2026-124950: Mozilla Firefox: Same-origin policy bypass in the CSS Parsing and Computation componentN/AN/AN/ANov 10, 2026
CVE-2026-124949: Mozilla Firefox: Other issue in the SVG componentN/AN/AN/ANov 10, 2026
CVE-2026-124948: Mozilla Firefox: Incorrect boundary conditions, use-after-free in the Graphics component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124947: Mozilla Firefox: Incorrect boundary conditions in the Graphics component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124946: Mozilla Firefox: Invalid pointer in the JavaScript Engine: JIT componentN/AN/AN/ANov 10, 2026
CVE-2026-124945: Mozilla Firefox: Invalid pointer in the Layout: Text and Fonts componentN/AN/AN/ANov 10, 2026
CVE-2026-124944: Mozilla Firefox: Information disclosure in the Marionette component4.3 MediumN/AN/ANov 10, 2026
CVE-2026-124943: Mozilla Firefox: Use-after-free in the Layout component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124942: Mozilla Firefox: Invalid pointer in the DOM: Streams componentN/AN/AN/ANov 10, 2026
CVE-2026-124941: Mozilla Firefox: Information disclosure in the Security: RLBox component4.3 MediumN/AN/ANov 10, 2026
CVE-2026-124940: Mozilla Firefox: Mitigation bypass in the File Handling componentN/AN/AN/ANov 10, 2026
CVE-2026-124939: Mozilla Firefox: JIT miscompilation in the JavaScript Engine: JIT componentN/AN/AN/ANov 10, 2026
CVE-2026-124938: Mozilla Firefox: Mitigation bypass in the Add-ons Manager componentN/AN/AN/ANov 10, 2026
CVE-2026-124937: Mozilla Firefox: Other issue in the Media component in Firefox for AndroidN/AN/AN/ANov 10, 2026
CVE-2026-124936: Mozilla Firefox: Spoofing issue in the Address Bar componentN/AN/AN/ANov 10, 2026
CVE-2026-124935: Mozilla Firefox: Undefined behavior in the WebRTC: Networking componentN/AN/AN/ANov 10, 2026
76-100 of 517528