The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-123521: Improper Restriction of Excessive Authentication Attempts5.9 Medium6.0 Medium0%Nov 8, 2026
CVE-2026-123520: Improper Privilege Management7.1 High7.1 High0%Nov 8, 2026
CVE-2026-123519: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-123518: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123517: Observable Response Discrepancy4.3 Medium7.1 High0%Nov 8, 2026
CVE-2026-123516: Allocation of Resources Without Limits or Throttling4.3 Medium7.1 High0%Nov 8, 2026
CVE-2026-123515: Unintended Proxy or Intermediary4.1 Medium5.1 Medium0%Nov 8, 2026
CVE-2026-123514: Uncontrolled Resource Consumption4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123513: Insertion of Sensitive Information Into Sent Data6.8 Medium7.6 High0%Nov 8, 2026
CVE-2026-123512: Insertion of Sensitive Information into Log File6.1 Medium8.4 High0%Nov 8, 2026
CVE-2026-123511: Allocation of Resources Without Limits or Throttling4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123510: Uncontrolled Search Path Element3.3 Low1.0 Low0%Nov 8, 2026
CVE-2026-123509: Allocation of Resources Without Limits or Throttling4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123508: Download of Code Without Integrity Check3.1 Low2.0 Low0%Nov 8, 2026
CVE-2026-123507: NULL Pointer Dereference2.7 Low5.1 Medium0%Nov 8, 2026
CVE-2026-123506: Incorrect Authorization5.4 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123505: Incorrect Default Permissions5.5 Medium6.8 Medium0%Nov 8, 2026
CVE-2026-123504: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123503: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123502: Insertion of Sensitive Information into Log File5.2 Medium6.9 Medium0%Nov 8, 2026
CVE-2026-123501: Uncontrolled Resource Consumption6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-123500: Incorrect Default Permissions6.2 Medium6.9 Medium0%Nov 8, 2026
CVE-2026-123499: Origin Validation Error5.9 Medium6.0 Medium0%Nov 8, 2026
CVE-2026-123498: Undefined Security Weakness3.7 Low2.1 Low0%Nov 8, 2026
CVE-2026-123497: Cleartext Transmission of Sensitive Information6.8 Medium7.6 High0%Nov 8, 2026
1101-1125 of 421944