The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-123547: URL Redirection to Untrusted Site4.7 Medium2.3 Low0%Nov 8, 2026
CVE-2026-123546: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123545: Cross-Site Request Forgery (CSRF)7.1 High7.1 High0%Nov 8, 2026
CVE-2026-123544: Use of Externally-Controlled Input to Select Classes or Code6.8 Medium6.1 Medium0%Nov 8, 2026
CVE-2026-123543: Allocation of Resources Without Limits or Throttling7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123542: Improperly Implemented Security Check for Standard6.8 Medium7.6 High0%Nov 8, 2026
CVE-2026-123541: URL Redirection to Untrusted Site4.7 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123540: Improper Encoding or Escaping of Output2.0 Low2.0 Low0%Nov 8, 2026
CVE-2026-123539: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Nov 8, 2026
CVE-2026-123538: Improper Verification of Cryptographic Signature6.6 Medium7.5 High0%Nov 8, 2026
CVE-2026-123537: Server-Side Request Forgery (SSRF)5.0 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123536: Server-Side Request Forgery (SSRF)4.1 Medium5.1 Medium0%Nov 8, 2026
CVE-2026-123535: Improper Neutralization of Special Elements in Output Used by a Downstream Component4.2 Medium2.3 Low0%Nov 8, 2026
CVE-2026-123534: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium8.3 High0%Nov 8, 2026
CVE-2026-123533: Uncaught Exception5.5 Medium6.8 Medium0%Nov 8, 2026
CVE-2026-123532: Improper Link Resolution Before File Access6.5 Medium7.1 High1%Nov 8, 2026
CVE-2026-123531: Uncontrolled Resource Consumption8.8 High8.7 High0%Nov 8, 2026
CVE-2026-123529: Improper Restriction of Rendered UI Layers or Frames4.6 Medium5.1 Medium0%Nov 8, 2026
CVE-2026-123528: Insufficient Session Expiration6.8 Medium7.6 High0%Nov 8, 2026
CVE-2026-123527: Incorrect Authorization5.4 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123526: Improperly Controlled Modification of Dynamically-Determined Object Attributes5.4 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123525: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-123524: Incorrect Authorization5.7 Medium6.9 Medium0%Nov 8, 2026
CVE-2026-123523: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-123522: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Nov 8, 2026
1076-1100 of 421944