The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-93766: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 7, 2026
CVE-2026-93755: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 7, 2026
CVE-2026-93429: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 7, 2026
CVE-2026-123776: Improper Validation of Specified Type of Input9.8 CriticalN/A0%Nov 7, 2026
CVE-2026-123418: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 7, 2026
CVE-2026-122231: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 7, 2026
CVE-2026-122059: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 7, 2026
CVE-2026-121977: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 7, 2026
CVE-2026-121976: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 7, 2026
CVE-2026-121765: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Nov 7, 2026
CVE-2026-121265: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Nov 7, 2026
CVE-2026-120685: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 7, 2026
CVE-2026-120683: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 7, 2026
CVE-2026-120509: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Nov 7, 2026
CVE-2026-119498: Authentication Bypass Using an Alternate Path or Channel5.3 MediumN/A0%Nov 7, 2026
CVE-2026-119183: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 7, 2026
CVE-2026-119075: Improper Privilege Management9.8 CriticalN/A1%Nov 7, 2026
CVE-2026-118267: Incorrect Authorization8.1 HighN/A1%Nov 7, 2026
CVE-2026-118066: Improper Authentication9.1 CriticalN/A1%Nov 7, 2026
CVE-2026-118056: Improper Neutralization of Input During Web Page Generation4.9 MediumN/A0%Nov 7, 2026
CVE-2026-118050: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 7, 2026
CVE-2026-118047: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Nov 7, 2026
CVE-2026-116751: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Nov 7, 2026
CVE-2026-116537: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 7, 2026
CVE-2026-115548: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Nov 7, 2026
1201-1225 of 420168