The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-123493: Insufficient Session Expiration5.4 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123574: Improper Input Validation7.5 High8.7 High0%Nov 8, 2026
CVE-2026-123530: Missing Authentication for Critical Function5.9 Medium6.0 Medium0%Nov 8, 2026
CVE-2026-120531: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 7, 2026
CVE-2026-99284: Undefined Security WeaknessN/AN/A0%Nov 7, 2026
CVE-2026-99283: Undefined Security WeaknessN/AN/A0%Nov 7, 2026
CVE-2026-124060: Buffer Copy without Checking Size of Input9.1 Critical8.5 High1%Nov 7, 2026
CVE-2026-124058: Buffer Copy without Checking Size of Input9.1 Critical8.5 High0%Nov 7, 2026
CVE-2026-124059: Buffer Copy without Checking Size of Input9.1 Critical8.5 High0%Nov 7, 2026
CVE-2026-124258: Missing Authorization5.3 MediumN/A0%Nov 7, 2026
CVE-2026-124057: Buffer Copy without Checking Size of Input9.1 Critical8.5 High1%Nov 7, 2026
CVE-2026-123472: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 7, 2026
CVE-2026-123461: Missing Authorization5.3 MediumN/A0%Nov 7, 2026
CVE-2026-120836: Missing Authorization6.5 MediumN/A0%Nov 7, 2026
CVE-2026-119522: Missing Authorization5.3 MediumN/A0%Nov 7, 2026
CVE-2026-123990: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Nov 7, 2026
CVE-2026-123992: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Nov 7, 2026
CVE-2026-123991: Unrestricted Upload of File with Dangerous Type7.3 High5.5 Medium0%Nov 7, 2026
CVE-2026-124318: Deserialization of Untrusted Data7.2 High8.6 High1%Nov 7, 2026
CVE-2026-124317: Buffer Over-read4.8 Medium6.3 Medium0%Nov 7, 2026
CVE-2026-124316: Missing Authorization4.3 Medium5.3 Medium0%Nov 7, 2026
CVE-2026-124314: Missing Authorization6.5 Medium7.1 High0%Nov 7, 2026
CVE-2026-124313: Missing Authorization4.3 Medium5.3 Medium0%Nov 7, 2026
CVE-2026-124312: Out-of-bounds Read4.7 Medium5.7 Medium0%Nov 7, 2026
CVE-2026-124310: Improper Validation of Array Index6.1 Medium6.9 Medium0%Nov 7, 2026
1201-1225 of 517528