The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
Fortinet FortiOS: CVE-2026-126253: Authentication bypass by primary weakness9.3 CriticalN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126252: Improper neutralization of special elements used in an SQL command in collectoragent8.3 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126251: Incorrect authorization9.1 CriticalN/A1%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126250: Incorrect authorization in django-guest8.2 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126249: Improper privilege management7.2 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126248: Insufficiently protected credentials7.5 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126247: Use of externally-controlled format string7.2 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126246: Null pointer dereference7.5 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126245: Out-of-bounds write8.1 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126244: Allocation of resources without limits or throttling in fastapi7.5 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126243: Incorrect authorization7.2 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126242: Incorrect authorization7.4 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126241: Improper neutralization of special elements used in an SQL command8.8 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126240: Improper neutralization of special elements used in an ldap query8.2 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126239: Stack-based buffer overflow7.5 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126238: Incorrect authorization in rest-api8.6 HighN/A0%Nov 11, 2026
Fortinet FortiAuthenticator: CVE-2026-126237: Loop with unreachable exit condition7.5 HighN/A0%Nov 11, 2026
Fortinet FortiManager: CVE-2026-126236: Improper neutralization of special elements used in an os command in GUI7.2 HighN/A2%Nov 11, 2026
Fortinet FortiManager: CVE-2026-126235: Improper limitation of a pathname to a restricted directory in apache_mod7.2 HighN/A1%Nov 11, 2026
Fortinet FortiManager: CVE-2026-126234: Improper neutralization of special elements used in a template engine7.2 HighN/A1%Nov 11, 2026
Fortinet FortiManager: CVE-2026-126233: Unrestricted upload of file with dangerous type in httpd7.2 HighN/A0%Nov 11, 2026
Fortinet FortiManager: CVE-2026-126232: Improper certificate validation in RADIUS protocol7.5 HighN/A0%Nov 11, 2026
Fortinet FortiManager: CVE-2026-126231: Improper neutralization of special elements used in an OS command7.2 HighN/A2%Nov 11, 2026
Fortinet FortiManager: CVE-2026-126230: Use of externally-controlled format string7.2 HighN/A0%Nov 11, 2026
Fortinet FortiManager: CVE-2026-126229: Authorization bypass through user-controlled key in dmserver9.1 CriticalN/A1%Nov 11, 2026
1176-1200 of 532044