The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-20559: MediaTek, Inc. MediaTek chipset: In GPU pdma, there is a possible memory corruption due to use after free7.8 HighN/AN/ANov 2, 2026
CVE-2026-20558: MediaTek, Inc. MediaTek chipset: In GPU pdma, there is a possible escalation of privilege due to use after free8.4 HighN/AN/ANov 2, 2026
CVE-2026-20557: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds check7.5 HighN/AN/ANov 2, 2026
CVE-2026-20556: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds check7.5 HighN/AN/ANov 2, 2026
CVE-2026-20555: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds read due to a missing bounds check5.3 MediumN/AN/ANov 2, 2026
CVE-2026-20554: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible system crash due to a missing bounds check7.1 HighN/AN/ANov 2, 2026
CVE-2026-20553: MediaTek, Inc. MediaTek chipset: In DA, there is a possible out of bounds write due to a missing bounds check6.8 MediumN/AN/ANov 2, 2026
CVE-2026-20552: MediaTek, Inc. MediaTek chipset: In ccci, there is a possible out of bounds write due to a missing bounds check6.5 MediumN/AN/ANov 2, 2026
CVE-2026-20551: MediaTek, Inc. MediaTek chipset: In gnss, there is a possible out of bounds write due to a missing bounds check5.5 MediumN/AN/ANov 2, 2026
CVE-2026-20550: MediaTek, Inc. MediaTek chipset: In gnss, there is a possible out of bounds write due to a missing bounds check6.2 MediumN/AN/ANov 2, 2026
CVE-2026-20549: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to improper input validation7.5 HighN/AN/ANov 2, 2026
CVE-2026-20548: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to an integer overflow7.5 HighN/AN/ANov 2, 2026
CVE-2026-20547: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds check7.5 HighN/AN/ANov 2, 2026
CVE-2026-20546: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to an incorrect bounds check7.5 HighN/AN/ANov 2, 2026
CVE-2026-20545: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds check7.5 HighN/AN/ANov 2, 2026
CVE-2026-20499: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds check7.5 HighN/AN/ANov 2, 2026
CVE-2026-120335: deepset-ai farm: A vulnerability has been found in deepset-ai farm up to 0.8.04.8 Medium0.9 LowN/ANov 2, 2026
CVE-2026-120334: deepset-ai farm: A flaw has been found in deepset-ai farm up to 0.8.04.3 Medium2.1 LowN/ANov 2, 2026
CVE-2026-120325: Webpro-nl Knip: A security vulnerability has been detected in Webpro-nl Knip up to 6.44.06.3 Medium2.1 LowN/ANov 2, 2026
CVE-2026-120324: Aklivity Zilla: A weakness has been identified in Aklivity Zilla up to 1.3.4/2.4.7/2.5.0-rc28.3 High5.5 MediumN/ANov 2, 2026
CVE-2026-120317: http4k: http4k from 4.9.10.0 before 6.60.0.0 contains a missing integrity check vulnerability because DigestEncoder computes…5.9 Medium8.2 HighN/ANov 2, 2026
CVE-2026-120316: http4k: http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that…5.9 Medium8.2 HighN/ANov 2, 2026
CVE-2026-120315: lobehub chat: LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated users to…8.8 High8.7 HighN/ANov 2, 2026
CVE-2026-120314: Jovancoding Network-AI: Network-AI from 5.14.0 before 5.15.5 contains a missing authentication vulnerability in the A2AServer class that allows…7.3 High6.9 MediumN/ANov 2, 2026
CVE-2026-120313: Jovancoding Network-AI: Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath() that allows attackers…7.5 High8.7 HighN/ANov 2, 2026
401-425 of 574114
‹›