The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-90577: Heap-based Buffer Overflow5.3 Medium1.9 Low0%Sep 13, 2026
CVE-2026-90783: Integer Overflow to Buffer Overflow7.8 High8.5 High0%Sep 13, 2026
CVE-2026-90781: Off-by-one Error4.4 Medium4.8 Medium0%Sep 13, 2026
CVE-2026-90780: Buffer Copy without Checking Size of Input7.5 High8.7 High1%Sep 13, 2026
CVE-2026-90779: Stack-based Buffer Overflow7.5 High8.7 High1%Sep 13, 2026
CVE-2026-90778: Buffer Copy without Checking Size of Input7.5 High8.7 High1%Sep 13, 2026
CVE-2026-90558: Stack-based Buffer Overflow9.8 Critical9.3 Critical1%Sep 12, 2026
CVE-2026-90556: Heap-based Buffer Overflow7.8 High8.5 High0%Sep 12, 2026
CVE-2026-90473: Integer Overflow or Wraparound5.3 Medium6.9 Medium0%Sep 12, 2026
CVE-2026-90472: Uncontrolled Recursion5.3 Medium6.9 Medium0%Sep 12, 2026
CVE-2026-89266: Out-of-bounds Write8.2 High8.8 High0%Sep 12, 2026
CVE-2026-54241: Heap-based Buffer Overflow7.4 HighN/A0%Sep 11, 2026
CVE-2026-54240: Integer Overflow or Wraparound7.4 HighN/A0%Sep 11, 2026
CVE-2026-48490: Buffer Copy without Checking Size of InputN/A6.9 Medium0%Sep 11, 2026
CVE-2026-89725: Undefined Security Weakness8.8 HighN/A0%Sep 11, 2026
CVE-2026-89666: Undefined Security WeaknessN/AN/A0%Sep 11, 2026
CVE-2026-89657: Undefined Security Weakness7.5 HighN/A1%Sep 11, 2026
CVE-2026-89652: Undefined Security Weakness9.8 CriticalN/A0%Sep 11, 2026
CVE-2026-89650: Undefined Security Weakness9.1 CriticalN/A0%Sep 11, 2026
CVE-2026-89634: Undefined Security Weakness9.1 CriticalN/A1%Sep 11, 2026
CVE-2026-89633: Undefined Security Weakness9.8 CriticalN/A0%Sep 11, 2026
CVE-2026-89630: Undefined Security Weakness9.1 CriticalN/A0%Sep 11, 2026
CVE-2026-89620: Undefined Security Weakness7.8 HighN/A0%Sep 11, 2026
CVE-2026-89619: Undefined Security Weakness7.8 HighN/A0%Sep 11, 2026
CVE-2026-89617: Undefined Security Weakness7.8 HighN/A0%Sep 11, 2026
401-425 of 27734