The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-121403: Allocation of Resources Without Limits or Throttling4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121402: NULL Pointer Dereference6.5 Medium7.1 High0%Nov 3, 2026
CVE-2026-121401: NULL Pointer Dereference4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121400: Loop with Unreachable Exit Condition6.5 Medium7.1 High0%Nov 3, 2026
CVE-2026-121399: Allocation of Resources Without Limits or Throttling4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121398: Use After Free5.9 Medium8.2 High0%Nov 3, 2026
CVE-2026-121397: Out-of-bounds Read4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121396: Reachable Assertion4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121395: Reachable Assertion6.5 Medium7.1 High0%Nov 3, 2026
CVE-2026-121394: Reachable Assertion6.5 Medium7.1 High0%Nov 3, 2026
CVE-2026-121393: Reachable Assertion6.5 Medium7.1 High0%Nov 3, 2026
CVE-2026-121392: Improper Certificate Validation7.4 High9.1 Critical0%Nov 3, 2026
CVE-2026-121391: Missing Release of Resource after Effective Lifetime4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121390: Reachable Assertion4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121389: Reachable Assertion3.1 Low2.3 Low0%Nov 3, 2026
CVE-2026-121388: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Nov 3, 2026
CVE-2026-121387: Out-of-bounds Read4.3 Medium5.3 Medium0%Nov 3, 2026
CVE-2026-121386: Uncaught Exception7.5 High8.7 High0%Nov 3, 2026
CVE-2026-118527: Generation of Predictable Numbers or Identifiers4.3 MediumN/A1%Nov 3, 2026
CVE-2026-118489: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Nov 3, 2026
CVE-2026-118488: Allocation of Resources Without Limits or Throttling5.9 MediumN/A0%Nov 3, 2026
CVE-2026-110265: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Nov 3, 2026
CVE-2026-106991: Undefined Security Weakness7.1 HighN/A0%Nov 3, 2026
CVE-2026-100493: Integer Overflow or WraparoundN/A6.9 Medium0%Nov 3, 2026
CVE-2026-89295: Allocation of Resources Without Limits or ThrottlingN/AN/A0%Nov 3, 2026
1001-1025 of 418286