The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-99226: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: Avoid the owner account dereference in named…N/AN/AN/ANov 2, 2026
CVE-2026-99225: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in process…N/AN/AN/ANov 2, 2026
CVE-2026-99224: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: Protect the type name while describing a key…7.0 HighN/AN/ANov 2, 2026
CVE-2026-99223: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: make keyring indexes independent of kernel…N/AN/AN/ANov 2, 2026
CVE-2026-99222: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: Protect the read method check against type…N/AN/AN/ANov 2, 2026
CVE-2026-99221: Linux: In the Linux kernel, the following vulnerability has been resolved: keys/trusted_keys: return immediately after TPM…N/AN/AN/ANov 2, 2026
CVE-2026-99220: Linux: In the Linux kernel, the following vulnerability has been resolved: asymmetric_keys: reject trust keys without IDs The…N/AN/AN/ANov 2, 2026
CVE-2026-99219: Linux: In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in…N/AN/AN/ANov 2, 2026
CVE-2026-99218: Linux: In the Linux kernel, the following vulnerability has been resolved: coredump: hold RCU while releasing parked threads…7.0 HighN/AN/ANov 2, 2026
CVE-2026-99217: Linux: In the Linux kernel, the following vulnerability has been resolved: fork: release the files of a failed fork after…N/AN/AN/ANov 2, 2026
CVE-2026-73697: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection…8.8 High8.7 HighN/ANov 2, 2026
CVE-2026-73696: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user…9.1 Critical9.3 CriticalN/ANov 2, 2026
CVE-2026-73695: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in…8.8 High8.7 HighN/ANov 2, 2026
CVE-2026-120492: Chainlit: Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass…5.4 Medium6.3 MediumN/ANov 2, 2026
CVE-2026-120491: Wing FTP Software Wing FTP Server: Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows authenticated web-client…5.4 Medium5.1 MediumN/ANov 2, 2026
CVE-2026-120489: Outline: Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish() that allows…4.3 Medium5.3 MediumN/ANov 2, 2026
CVE-2026-120488: LaraDashboard: LaraDashboard before 1.4.9 contains a stored cross-site scripting vulnerability that allows authenticated users with…5.4 Medium5.1 MediumN/ANov 2, 2026
CVE-2026-120487: LaraDashboard: LaraDashboard before 1.4.5 contains an incorrect authorization vulnerability in SettingPolicy::manageCoreUpgrades()…7.2 High8.6 HighN/ANov 2, 2026
CVE-2026-120460: dromara Jpom: Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to…8.8 High8.7 HighN/ANov 2, 2026
CVE-2026-120459: mpdavis python-jose: python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to…7.4 High9.1 CriticalN/ANov 2, 2026
CVE-2026-120458: Ultra Video Group Kvazaar: Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c that allows attackers…5.5 Medium6.8 MediumN/ANov 2, 2026
CVE-2026-120457: Deutsches Klimarechenzentrum libaec: libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows…5.3 Medium5.8 MediumN/ANov 2, 2026
CVE-2026-120456: L-SMASH: L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerability in isom_read_hdlr() and isom_read_dref_entry()…6.1 Medium6.9 MediumN/ANov 2, 2026
CVE-2026-120455: biojppm rapidyaml: rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::_add_annotation() that allows…6.1 Medium6.9 MediumN/ANov 2, 2026
CVE-2026-120454: The Sleuth Kit: The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_attr() that…5.5 Medium6.8 MediumN/ANov 2, 2026
251-275 of 574114
‹›