The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-126300: nltk: NLTK from 3.2.5 before 3.10.4 contains an algorithmic complexity vulnerability in TreebankWordTokenizer.span_tokenize…5.3 Medium6.9 MediumN/ANov 13, 2026
CVE-2026-126299: nltk: NLTK before 3.10.4 contains a denial of service vulnerability in the CCG lexicon parser fromstring that allows remote…7.5 High8.7 HighN/ANov 13, 2026
CVE-2026-126298: nltk: NLTK before 3.10.4 contains a denial of service vulnerability in Tree.chomsky_normal_form that allows remote attackers…7.5 High8.7 HighN/ANov 13, 2026
CVE-2026-126297: nltk: NLTK before 3.10.4 contains a quadratic-time denial of service vulnerability in ConllCorpusReader._get_srl_instances…7.5 High8.7 HighN/ANov 13, 2026
CVE-2026-126296: nltk: NLTK before 3.10.4 contains a path traversal vulnerability in save_maxent_params() and load_maxent_params() that…4.8 Medium6.3 MediumN/ANov 13, 2026
CVE-2026-126295: nltk: NLTK from 3.10.0 before 3.10.4 contains an arbitrary file read vulnerability in BllipParser that allows attackers to…6.8 Medium7.0 HighN/ANov 13, 2026
CVE-2026-126294: getgrav grav: Grav Login plugin before 3.11.0 contains an authentication bypass vulnerability that allows attackers with an account…7.5 High8.7 HighN/ANov 13, 2026
CVE-2026-126293: nocodb: NocoDB before 2026.06.2 contains an attachment size limit bypass that allows authenticated Editor users to store…6.5 Medium7.1 HighN/ANov 13, 2026
CVE-2026-126292: nocodb: NocoDB before 2026.06.1 contains an information disclosure vulnerability in the profile update handler in…4.3 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-126291: nocodb: NocoDB before 2026.06.2 contains an SQL injection vulnerability in base-user.cte.utils.ts, which concatenates base…8.8 High8.7 HighN/ANov 13, 2026
CVE-2026-126290: nocodb: NocoDB before 2026.07.0 contains an information disclosure vulnerability in base-integrations.service.ts that allows…6.5 Medium7.1 HighN/ANov 13, 2026
CVE-2026-126289: nocodb: NocoDB before 2026.06.1 contains a CSV formula injection vulnerability in export.service.ts that writes record values…5.4 Medium5.1 MediumN/ANov 13, 2026
CVE-2026-126288: nocodb: NocoDB before 2026.06.2 contains an information disclosure vulnerability that allows unauthenticated attackers to…5.3 Medium6.9 MediumN/ANov 13, 2026
CVE-2026-126287: nocodb: NocoDB before 2026.06.2 contains a race condition vulnerability in oauth-token.service.ts that allows attackers to…5.9 Medium6.0 MediumN/ANov 13, 2026
CVE-2026-126286: nocodb: NocoDB before 2026.08.0 contains a reflected cross-site scripting vulnerability in PageLeavingWarning.vue that allows…8.1 High8.6 HighN/ANov 13, 2026
CVE-2026-126285: nocodb: NocoDB before 2026.08.0 contains an sql injection vulnerability that allows authenticated users with read access to run…7.7 High8.3 HighN/ANov 13, 2026
CVE-2026-126284: nocodb: NocoDB from 2026.05.2 before 2026.07.0 contains a server-side request forgery vulnerability that allows Editor-role…3.1 Low2.3 LowN/ANov 13, 2026
CVE-2026-126283: nocodb: NocoDB before 2026.08.0 contains an incorrect authorization vulnerability that lets base-scoped API tokens act as…8.8 High8.7 HighN/ANov 13, 2026
CVE-2026-126282: nocodb: NocoDB from 2026.04.0 before 2026.08.0 contains an improper privilege management vulnerability in org-users.service.ts…8.0 High8.6 HighN/ANov 13, 2026
CVE-2026-126281: nocodb: NocoDB before 2026.08.0 contains a missing authorization vulnerability in the copy-from branch of integration creation…6.5 Medium7.1 HighN/ANov 13, 2026
CVE-2026-126280: nocodb: NocoDB before 2026.08.0 contains a race condition in refresh-token rotation that allows attackers to reuse tokens…7.4 High9.1 CriticalN/ANov 13, 2026
CVE-2026-126279: nocodb: NocoDB before 2026.06.2 contains a stored cross-site scripting vulnerability in PromptWithFields.vue that renders…6.3 Medium7.0 HighN/ANov 13, 2026
CVE-2026-126278: nocodb: NocoDB before 2026.08.1 contains a race condition vulnerability in users.service.ts that allows holders of a valid…7.5 High8.7 HighN/ANov 13, 2026
CVE-2026-126277: nocodb: NocoDB before 2026.08.1 contains an uncontrolled resource consumption vulnerability that allows unauthenticated…7.5 High8.7 HighN/ANov 13, 2026
CVE-2026-126276: nocodb: NocoDB before 2026.08.1 contains an authentication bypass vulnerability in oauth-token.service.ts that treats PKCE as a…6.3 Medium8.2 HighN/ANov 13, 2026
301-325 of 427590