The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-9660: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9814: Totolink: An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9817: Totolink: A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9827: Totolink: A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-9869: Totolink: A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-10131: Totolink: An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-10132: Totolink: A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-10133: Totolink: A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-10135: Totolink: A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-10136: Totolink: A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-10137: Totolink: A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-10138: Totolink: A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-10139: Totolink: A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-10141: Totolink: A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s):…9.1 CriticalN/A0%Oct 20, 2026
CVE-2026-86413: curl: When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl…N/AN/A0%Oct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-86412): curl vulnerabilitiesN/AN/A0%Oct 20, 2026
CVE-2026-86411: curl: An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control connection that a previous easy…N/AN/A0%Oct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-86410): curl vulnerabilitiesN/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-86409: curl: curl: stale SigV4 headers sent unintendedN/AN/A0%Oct 20, 2026
CVE-2026-113869: Mozilla Thunderbird: When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while…5.4 MediumN/A0%Oct 20, 2026
CVE-2026-113868: Mozilla Thunderbird: When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was…5.3 MediumN/A0%Oct 20, 2026
CVE-2026-113867: Mozilla Thunderbird: Thunderbird did not escape attribute values when serializing outgoing XMPP stanzasN/AN/A0%Oct 20, 2026
CVE-2026-113866: Mozilla Thunderbird: When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service…5.9 MediumN/A0%Oct 20, 2026
CVE-2026-113725: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments7.8 HighN/A0%Oct 20, 2026
CVE-2026-113724: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments4.5 MediumN/A0%Oct 20, 2026
3051-3075 of 413321
‹›