The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-124441: Incorrect Authorization8.8 High8.7 High0%Nov 8, 2026
CVE-2026-124439: Uncontrolled Recursion7.5 High8.7 High0%Nov 8, 2026
CVE-2026-124438: Exposure of Sensitive Information to an Unauthorized Actor7.4 High9.1 Critical0%Nov 8, 2026
CVE-2026-124437: Uncontrolled Resource Consumption7.5 High8.7 High0%Nov 8, 2026
CVE-2026-124435: Improper Neutralization of Input During Web Page Generation4.8 Medium4.6 Medium0%Nov 8, 2026
CVE-2026-124434: Exposure of Sensitive Information to an Unauthorized Actor7.1 High7.1 High0%Nov 8, 2026
CVE-2026-124433: Incorrect Authorization6.5 Medium7.0 High0%Nov 8, 2026
CVE-2026-124431: Missing Authorization4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-124430: Improper Neutralization of Special Elements Used in a Template Engine8.8 High8.7 High1%Nov 8, 2026
CVE-2026-124429: Incorrect Privilege Assignment7.5 High8.7 High0%Nov 8, 2026
CVE-2026-124427: Missing Authorization9.8 Critical9.3 Critical0%Nov 8, 2026
CVE-2026-124426: Missing Authorization5.3 Medium6.9 Medium0%Nov 8, 2026
CVE-2026-124425: Observable Discrepancy3.1 Low2.3 Low0%Nov 8, 2026
CVE-2026-124331: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Nov 8, 2026
CVE-2026-124466: Server-Side Request Forgery (SSRF)7.2 High6.9 Medium0%Nov 8, 2026
CVE-2026-124444: Improper Neutralization of Special Elements used in an SQL Command7.1 High7.1 High0%Nov 8, 2026
CVE-2026-124440: Unintended Proxy or Intermediary9.9 Critical9.4 Critical1%Nov 8, 2026
CVE-2026-124436: Incorrect Authorization8.0 High8.6 High0%Nov 8, 2026
CVE-2026-124432: Observable Response Discrepancy7.3 High6.9 Medium0%Nov 8, 2026
CVE-2026-124428: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-124424: Improper Limitation of a Pathname to a Restricted Directory7.1 High7.1 High0%Nov 8, 2026
CVE-2026-124329: Improper Limitation of a Pathname to a Restricted Directory5.0 Medium1.3 Low0%Nov 8, 2026
CVE-2026-124330: Improper Limitation of a Pathname to a Restricted Directory5.0 Medium1.3 Low0%Nov 8, 2026
CVE-2026-124328: Improper Control of Generation of Code7.4 High2.1 Low0%Nov 8, 2026
CVE-2026-124326: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium2.1 Low0%Nov 8, 2026
1026-1050 of 517528