The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-124459: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Nov 8, 2026
CVE-2026-124458: Improper Access Control6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-124457: Improper Limitation of a Pathname to a Restricted Directory7.6 High7.2 High0%Nov 8, 2026
CVE-2026-124456: Missing Authorization7.1 High7.1 High0%Nov 8, 2026
CVE-2026-124455: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-124453: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Nov 8, 2026
CVE-2026-124452: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Nov 8, 2026
CVE-2026-124451: Authorization Bypass Through User-Controlled Key5.3 Medium6.0 Medium0%Nov 8, 2026
CVE-2026-124450: External Control of File Name or Path9.9 Critical9.3 Critical0%Nov 8, 2026
CVE-2026-124449: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-124448: Improper Neutralization of Input During Web Page Generation7.6 High8.6 High0%Nov 8, 2026
CVE-2026-124447: Authorization Bypass Through User-Controlled Key8.1 High8.6 High0%Nov 8, 2026
CVE-2026-124446: External Control of File Name or Path8.8 High8.7 High0%Nov 8, 2026
CVE-2026-124445: Improper Restriction of Excessive Authentication Attempts9.8 Critical9.3 Critical0%Nov 8, 2026
CVE-2026-124443: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-124442: Server-Side Request Forgery (SSRF)6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-124441: Incorrect Authorization8.8 High8.7 High0%Nov 8, 2026
CVE-2026-124439: Uncontrolled Recursion7.5 High8.7 High0%Nov 8, 2026
CVE-2026-124438: Exposure of Sensitive Information to an Unauthorized Actor7.4 High9.1 Critical0%Nov 8, 2026
CVE-2026-124437: Uncontrolled Resource Consumption7.5 High8.7 High0%Nov 8, 2026
CVE-2026-124435: Improper Neutralization of Input During Web Page Generation4.8 Medium4.6 Medium0%Nov 8, 2026
CVE-2026-124434: Exposure of Sensitive Information to an Unauthorized Actor7.1 High7.1 High0%Nov 8, 2026
CVE-2026-124433: Incorrect Authorization6.5 Medium7.0 High0%Nov 8, 2026
CVE-2026-124431: Missing Authorization4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-124430: Improper Neutralization of Special Elements Used in a Template Engine8.8 High8.7 High1%Nov 8, 2026
1076-1100 of 423720