The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-122060: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Nov 8, 2026
CVE-2026-114432: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A0%Nov 8, 2026
CVE-2026-110963: Improper Privilege Management9.8 CriticalN/A0%Nov 8, 2026
CVE-2026-110132: Incorrect Authorization4.9 MediumN/A0%Nov 8, 2026
CVE-2026-109925: Improper Neutralization of Special Elements used in an SQL Command8.6 HighN/A0%Nov 8, 2026
CVE-2026-106015: Improper Authentication8.1 HighN/A0%Nov 8, 2026
CVE-2026-105970: Improper Access Control5.3 MediumN/A0%Nov 8, 2026
CVE-2026-104639: Improper Neutralization of Special Elements used in an SQL Command4.1 MediumN/A0%Nov 8, 2026
CVE-2026-104338: Missing Authorization3.7 LowN/A0%Nov 8, 2026
CVE-2026-104337: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Nov 8, 2026
CVE-2026-104307: External Control of File Name or Path5.4 MediumN/A0%Nov 8, 2026
CVE-2026-103375: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Nov 8, 2026
CVE-2026-103303: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Nov 8, 2026
CVE-2026-114713: Improper Neutralization of Delimiters8.6 HighN/A0%Nov 8, 2026
CVE-2026-124422: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123616: Memory Allocation with Excessive Size Value7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123615: Out-of-bounds Write7.5 High8.7 High1%Nov 8, 2026
CVE-2026-123614: Heap-based Buffer Overflow9.8 Critical9.3 Critical1%Nov 8, 2026
CVE-2026-123613: Improper Input Validation5.3 Medium6.9 Medium0%Nov 8, 2026
CVE-2026-123612: Incorrect Behavior Order2.3 Low4.6 Medium0%Nov 8, 2026
CVE-2026-123611: Selection of Less-Secure Algorithm During Negotiation3.7 Low6.3 Medium0%Nov 8, 2026
CVE-2026-123610: Allocation of Resources Without Limits or Throttling3.7 Low6.3 Medium0%Nov 8, 2026
CVE-2026-123609: Improper Removal of Sensitive Information Before Storage or Transfer4.0 Medium4.1 Medium0%Nov 8, 2026
CVE-2026-123608: Inefficient Algorithmic Complexity7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123607: Loop with Unreachable Exit Condition7.5 High8.7 High0%Nov 8, 2026
1126-1150 of 423029