The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-124331: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Nov 8, 2026
CVE-2026-124466: Server-Side Request Forgery (SSRF)7.2 High6.9 Medium0%Nov 8, 2026
CVE-2026-124444: Improper Neutralization of Special Elements used in an SQL Command7.1 High7.1 High0%Nov 8, 2026
CVE-2026-124440: Unintended Proxy or Intermediary9.9 Critical9.4 Critical1%Nov 8, 2026
CVE-2026-124436: Incorrect Authorization8.0 High8.6 High0%Nov 8, 2026
CVE-2026-124432: Observable Response Discrepancy7.3 High6.9 Medium0%Nov 8, 2026
CVE-2026-124428: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-124424: Improper Limitation of a Pathname to a Restricted Directory7.1 High7.1 High0%Nov 8, 2026
CVE-2026-124329: Improper Limitation of a Pathname to a Restricted Directory5.0 Medium1.3 Low0%Nov 8, 2026
CVE-2026-124330: Improper Limitation of a Pathname to a Restricted Directory5.0 Medium1.3 Low0%Nov 8, 2026
CVE-2026-124328: Improper Control of Generation of Code7.4 High2.1 Low0%Nov 8, 2026
CVE-2026-124326: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium2.1 Low0%Nov 8, 2026
CVE-2026-97195: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Nov 8, 2026
CVE-2026-97194: Exposure of Sensitive Information to an Unauthorized Actor2.7 LowN/A0%Nov 8, 2026
CVE-2026-97193: Authorization Bypass Through User-Controlled Key2.7 LowN/A0%Nov 8, 2026
CVE-2026-97192: Improper Access Control2.7 LowN/A0%Nov 8, 2026
CVE-2026-96963: Missing Authorization2.7 LowN/A0%Nov 8, 2026
CVE-2026-96961: Missing Authorization6.5 MediumN/A0%Nov 8, 2026
CVE-2026-85344: Missing Authorization4.3 MediumN/A0%Nov 8, 2026
CVE-2026-122085: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Nov 8, 2026
CVE-2026-122062: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Nov 8, 2026
CVE-2026-122060: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Nov 8, 2026
CVE-2026-114432: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A0%Nov 8, 2026
CVE-2026-110963: Improper Privilege Management9.8 CriticalN/A0%Nov 8, 2026
CVE-2026-110132: Incorrect Authorization4.9 MediumN/A0%Nov 8, 2026
1101-1125 of 517528