The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-123963: Missing Authentication for Critical Function7.3 High5.5 Medium1%Nov 7, 2026
CVE-2026-123861: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Nov 7, 2026
CVE-2026-123860: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.3 MediumN/A0%Nov 7, 2026
CVE-2026-123483: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.3 MediumN/A0%Nov 7, 2026
CVE-2026-123477: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 7, 2026
CVE-2026-123474: Missing Authorization5.3 MediumN/A0%Nov 7, 2026
CVE-2026-123467: Missing Authorization4.3 MediumN/A0%Nov 7, 2026
CVE-2026-123462: Missing Authorization5.3 MediumN/A0%Nov 7, 2026
CVE-2026-122669: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 7, 2026
CVE-2026-122663: Missing Authorization5.3 MediumN/A0%Nov 7, 2026
CVE-2026-122660: Missing Authorization4.3 MediumN/A0%Nov 7, 2026
CVE-2026-122659: Missing Authorization5.4 MediumN/A0%Nov 7, 2026
CVE-2026-122041: Missing Authorization9.1 CriticalN/A0%Nov 7, 2026
CVE-2026-121784: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 7, 2026
CVE-2026-121777: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.3 MediumN/A0%Nov 7, 2026
CVE-2026-121775: Missing Authorization5.3 MediumN/A0%Nov 7, 2026
CVE-2026-121579: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 7, 2026
CVE-2026-121575: Missing Authorization5.3 MediumN/A0%Nov 7, 2026
CVE-2026-120841: Improper Control of Filename for Include/Require Statement in PHP Program8.8 HighN/A0%Nov 7, 2026
CVE-2026-120839: Improper Control of Filename for Include/Require Statement in PHP Program8.8 HighN/A0%Nov 7, 2026
CVE-2026-120579: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 7, 2026
CVE-2026-119156: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 7, 2026
CVE-2026-109973: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 7, 2026
CVE-2026-123183: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.3 MediumN/A0%Nov 7, 2026
CVE-2026-96565: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 7, 2026
1176-1200 of 424836