Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-105593: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-105592: Heap-based Buffer Overflow7.5 HighN/A1%Oct 13, 2026
CVE-2026-105591: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-105013: Deserialization of Untrusted Data7.4 HighN/A1%Oct 13, 2026
CVE-2026-102867: Out-of-bounds Read6.5 MediumN/A1%Oct 13, 2026
CVE-2026-102866: Improper Verification of Cryptographic Signature8.1 HighN/A1%Oct 13, 2026
CVE-2026-102865: Incorrect Authorization6.5 MediumN/A1%Oct 13, 2026
CVE-2026-102864: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 13, 2026
CVE-2026-102863: Improper Control of Generation of Code8.8 HighN/A1%Oct 13, 2026
CVE-2026-102862: Incorrect Authorization8.8 HighN/A1%Oct 13, 2026
CVE-2026-102861: Missing Authorization8.8 HighN/A1%Oct 13, 2026
CVE-2026-102860: Improper Access Control8.8 HighN/A1%Oct 13, 2026
CVE-2026-102859: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 13, 2026
CVE-2026-102858: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-102857: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-102856: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-102850: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-102849: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-100212: Use After Free8.8 HighN/A1%Oct 13, 2026
CVE-2026-100211: Use After Free8.8 HighN/A1%Oct 13, 2026
CVE-2026-100210: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-100209: Use After Free8.8 HighN/A1%Oct 13, 2026
CVE-2026-100208: Integer Overflow or Wraparound7.5 HighN/A0%Sep 25, 2026
CVE-2026-70125: Heap-based Buffer Overflow7.8 HighN/A0%Sep 23, 2026
CVE-2026-40058: Time-of-check Time-of-use (TOCTOU) Race Condition8.8 HighN/A0%Sep 15, 2026
401-425 of 1993