The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-104338: Missing Authorization3.7 LowN/A0%Nov 8, 2026
CVE-2026-104337: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Nov 8, 2026
CVE-2026-104307: External Control of File Name or Path5.4 MediumN/A0%Nov 8, 2026
CVE-2026-103375: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Nov 8, 2026
CVE-2026-103303: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Nov 8, 2026
CVE-2026-114713: Improper Neutralization of Delimiters8.6 HighN/A0%Nov 8, 2026
CVE-2026-124422: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123616: Memory Allocation with Excessive Size Value7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123615: Out-of-bounds Write7.5 High8.7 High1%Nov 8, 2026
CVE-2026-123614: Heap-based Buffer Overflow9.8 Critical9.3 Critical1%Nov 8, 2026
CVE-2026-123613: Improper Input Validation5.3 Medium6.9 Medium0%Nov 8, 2026
CVE-2026-123612: Incorrect Behavior Order2.3 Low4.6 Medium0%Nov 8, 2026
CVE-2026-123611: Selection of Less-Secure Algorithm During Negotiation3.7 Low6.3 Medium0%Nov 8, 2026
CVE-2026-123610: Allocation of Resources Without Limits or Throttling3.7 Low6.3 Medium0%Nov 8, 2026
CVE-2026-123609: Improper Removal of Sensitive Information Before Storage or Transfer4.0 Medium4.1 Medium0%Nov 8, 2026
CVE-2026-123608: Inefficient Algorithmic Complexity7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123607: Loop with Unreachable Exit Condition7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123606: Uncontrolled Resource Consumption7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123605: Improper Verification of Cryptographic Signature8.8 High8.7 High0%Nov 8, 2026
CVE-2026-123604: Loop with Unreachable Exit Condition7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123603: Improper Access Control6.5 Medium6.9 Medium0%Nov 8, 2026
CVE-2026-123602: Operation on a Resource after Expiration or Release5.9 Medium8.2 High0%Nov 8, 2026
CVE-2026-123601: Use of Incorrect Operator6.5 Medium8.3 High0%Nov 8, 2026
CVE-2026-123600: Improperly Implemented Security Check for Standard4.8 Medium6.3 Medium0%Nov 8, 2026
CVE-2026-123599: Insufficient Verification of Data Authenticity3.7 Low6.3 Medium0%Nov 8, 2026
1001-1025 of 417064