The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-123539: Improper Neutralization of Input During Web Page Generation4.8 Medium4.8 Medium0%Nov 8, 2026
CVE-2026-123538: Improper Verification of Cryptographic Signature6.6 Medium7.5 High0%Nov 8, 2026
CVE-2026-123537: Server-Side Request Forgery (SSRF)5.0 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123536: Server-Side Request Forgery (SSRF)4.1 Medium5.1 Medium0%Nov 8, 2026
CVE-2026-123535: Improper Neutralization of Special Elements in Output Used by a Downstream Component4.2 Medium2.3 Low0%Nov 8, 2026
CVE-2026-123534: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium8.3 High0%Nov 8, 2026
CVE-2026-123533: Uncaught Exception5.5 Medium6.8 Medium0%Nov 8, 2026
CVE-2026-123532: Improper Link Resolution Before File Access6.5 Medium7.1 High1%Nov 8, 2026
CVE-2026-123531: Uncontrolled Resource Consumption8.8 High8.7 High0%Nov 8, 2026
CVE-2026-123529: Improper Restriction of Rendered UI Layers or Frames4.6 Medium5.1 Medium0%Nov 8, 2026
CVE-2026-123528: Insufficient Session Expiration6.8 Medium7.6 High0%Nov 8, 2026
CVE-2026-123527: Incorrect Authorization5.4 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123526: Improperly Controlled Modification of Dynamically-Determined Object Attributes5.4 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123525: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-123524: Incorrect Authorization5.7 Medium6.9 Medium0%Nov 8, 2026
CVE-2026-123523: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-123522: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Nov 8, 2026
CVE-2026-123521: Improper Restriction of Excessive Authentication Attempts5.9 Medium6.0 Medium0%Nov 8, 2026
CVE-2026-123520: Improper Privilege Management7.1 High7.1 High0%Nov 8, 2026
CVE-2026-123519: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-123518: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123517: Observable Response Discrepancy4.3 Medium7.1 High0%Nov 8, 2026
CVE-2026-123516: Allocation of Resources Without Limits or Throttling4.3 Medium7.1 High0%Nov 8, 2026
CVE-2026-123515: Unintended Proxy or Intermediary4.1 Medium5.1 Medium0%Nov 8, 2026
CVE-2026-123514: Uncontrolled Resource Consumption4.3 Medium5.3 Medium0%Nov 8, 2026
1151-1175 of 517528