The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-123529: Improper Restriction of Rendered UI Layers or Frames4.6 Medium5.1 Medium0%Nov 8, 2026
CVE-2026-123528: Insufficient Session Expiration6.8 Medium7.6 High0%Nov 8, 2026
CVE-2026-123527: Incorrect Authorization5.4 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123526: Improperly Controlled Modification of Dynamically-Determined Object Attributes5.4 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123525: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-123524: Incorrect Authorization5.7 Medium6.9 Medium0%Nov 8, 2026
CVE-2026-123523: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-123522: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Nov 8, 2026
CVE-2026-123521: Improper Restriction of Excessive Authentication Attempts5.9 Medium6.0 Medium0%Nov 8, 2026
CVE-2026-123520: Improper Privilege Management7.1 High7.1 High0%Nov 8, 2026
CVE-2026-123519: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Nov 8, 2026
CVE-2026-123518: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123517: Observable Response Discrepancy4.3 Medium7.1 High0%Nov 8, 2026
CVE-2026-123516: Allocation of Resources Without Limits or Throttling4.3 Medium7.1 High0%Nov 8, 2026
CVE-2026-123515: Unintended Proxy or Intermediary4.1 Medium5.1 Medium0%Nov 8, 2026
CVE-2026-123514: Uncontrolled Resource Consumption4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123513: Insertion of Sensitive Information Into Sent Data6.8 Medium7.6 High0%Nov 8, 2026
CVE-2026-123512: Insertion of Sensitive Information into Log File6.1 Medium8.4 High0%Nov 8, 2026
CVE-2026-123511: Allocation of Resources Without Limits or Throttling4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123510: Uncontrolled Search Path Element3.3 Low1.0 Low0%Nov 8, 2026
CVE-2026-123509: Allocation of Resources Without Limits or Throttling4.3 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123508: Download of Code Without Integrity Check3.1 Low2.0 Low0%Nov 8, 2026
CVE-2026-123507: NULL Pointer Dereference2.7 Low5.1 Medium0%Nov 8, 2026
CVE-2026-123506: Incorrect Authorization5.4 Medium5.3 Medium0%Nov 8, 2026
CVE-2026-123505: Incorrect Default Permissions5.5 Medium6.8 Medium0%Nov 8, 2026
1226-1250 of 423029
‹

Refine your search or filters to see more results.