The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-123569: Allocation of Resources Without Limits or Throttling7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123568: Improperly Controlled Modification of Object Prototype Attributes4.4 Medium2.1 Low0%Nov 8, 2026
CVE-2026-123567: Improperly Controlled Modification of Object Prototype Attributes3.7 Low6.3 Medium0%Nov 8, 2026
CVE-2026-123566: Uncontrolled Resource Consumption7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123565: Uncontrolled Resource Consumption7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123564: Allocation of Resources Without Limits or Throttling7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123563: Memory Allocation with Excessive Size Value7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123562: Uncaught Exception7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123561: Improperly Controlled Modification of Object Prototype Attributes3.7 Low6.3 Medium0%Nov 8, 2026
CVE-2026-123560: Incomplete Cleanup7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123559: Inefficient Algorithmic Complexity7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123558: Improper Cleanup on Thrown Exception7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123557: Reachable Assertion5.9 Medium8.2 High0%Nov 8, 2026
CVE-2026-123556: Protection Mechanism Failure5.3 Medium6.9 Medium0%Nov 8, 2026
CVE-2026-123555: Improper Handling of Exceptional Conditions7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123554: Inefficient Algorithmic Complexity7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123553: Use of Default Credentials6.5 Medium6.9 Medium0%Nov 8, 2026
CVE-2026-123552: Server-Side Request Forgery (SSRF)6.5 Medium6.3 Medium0%Nov 8, 2026
CVE-2026-123551: Insertion of Sensitive Information Into Sent Data10.0 Critical10.0 Critical0%Nov 8, 2026
CVE-2026-123550: Authentication Bypass by Spoofing9.8 Critical9.3 Critical1%Nov 8, 2026
CVE-2026-123549: Improper Privilege Management9.8 Critical9.3 Critical0%Nov 8, 2026
CVE-2026-123548: URL Redirection to Untrusted Site4.7 Medium2.3 Low0%Nov 8, 2026
CVE-2026-123547: URL Redirection to Untrusted Site4.7 Medium2.3 Low0%Nov 8, 2026
CVE-2026-123546: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123545: Cross-Site Request Forgery (CSRF)7.1 High7.1 High0%Nov 8, 2026
1126-1150 of 517528