The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-111340: Citrix: Memory overflow in KBA (knowledge-based authentication) can lead to unpredictable or erroneous behavior or Denial of…N/A8.7 HighN/ANov 13, 2026
CVE-2026-107415: Citrix: Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in…N/A9.3 CriticalN/ANov 13, 2026
CVE-2026-74911: Imagination Technologies Graphics DDK: Software installed and run as a non-privileged user may conduct improper GPU system calls to the execution of an error…N/AN/AN/ANov 13, 2026
CVE-2026-49747: Imagination Technologies Graphics DDK: Software installed and run as a non-privileged user may conduct GPU system calls to trigger an integer overflow and…N/AN/AN/ANov 13, 2026
CVE-2026-127286: Zackriya-Solutions Meetily: A vulnerability was identified in Zackriya-Solutions Meetily up to 0.4.17.3 High5.5 MediumN/ANov 13, 2026
CVE-2026-127285: Cairo-dock Glx-Dock: A flaw has been found in Cairo-dock Glx-Dock 3.4.04.3 Medium2.1 LowN/ANov 13, 2026
CVE-2026-107414: Citrix: Memory overflow in WebAuth authentication can lead to unpredictable or erroneous behavior or Denial of Service in…N/A8.7 HighN/ANov 13, 2026
CVE-2026-107413: Citrix NetScaler: Memory overflow in SAML authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-107412: Citrix NetScaler: Multiple Memory overflow vulnerabilities can lead to unpredictable or erroneous behavior and Denial of Service in…N/A9.5 CriticalN/ANov 13, 2026
CVE-2026-107411: Citrix NetScaler: Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScalerN/A8.7 HighN/ANov 13, 2026
CVE-2026-16671: mcu-tools mcuboot: split_image_check() in boot/bootutil/src/loader.c declares a fixed uint8_t loader_hash[32] buffer and passes it as the…2.9 LowN/AN/ANov 13, 2026
CVE-2026-16664: mcu-tools mcuboot: MCUboot's Zephyr serial-recovery upload handler bs_upload() in boot/boot_serial/src/boot_serial.c decodes the…5.1 MediumN/AN/ANov 13, 2026
CVE-2026-16662: mcu-tools mcuboot: boot_save_boot_status() in boot/bootutil/src/boot_record.c reads the image's EXPECTED_HASH_TLV into a stack buffer…2.4 LowN/AN/ANov 13, 2026
CVE-2026-16659: mcu-tools mcuboot: MCUboot's serial-recovery image-upload handler bs_upload() in boot/boot_serial/src/boot_serial.c declares const struct…4.0 MediumN/AN/ANov 13, 2026
CVE-2026-15465: Imagination Technologies Graphics DDK: Software installed and run as a non-privileged user may conduct improper GPU system calls through the DDK kernel module…N/AN/AN/ANov 13, 2026
CVE-2026-128321: UltraVNC, Glavsoft (TightVNC): Tight JPEG decoding in TightVNC and UltraVNC viewers contains a heap-based buffer overflow because an…N/AN/AN/ANov 13, 2026
CVE-2026-128091: mcu-tools mcuboot: When MCUboot is built with the TinyCrypt crypto backend (MCUBOOT_USE_TINYCRYPT), bootutil_aes_ctr_drop() in…2.0 LowN/AN/ANov 13, 2026
CVE-2026-127928: mcu-tools mcuboot: In MCUboot's serial-recovery encrypted-image support (boot/boot_serial/src/boot_serial_encryption.c),…2.0 LowN/AN/ANov 13, 2026
CVE-2026-127916: mcu-tools mcuboot: bootutil_img_hash() computes the image digest over ih_hdr_size + ih_img_size + ih_protect_tlv_size bytes, all three…2.9 LowN/AN/ANov 13, 2026
CVE-2026-127915: mcu-tools mcuboot: The MCUboot TLV iterator bootutil_tlv_iter_next() in boot/bootutil/src/tlv.c walks image trailer TLVs with a single…2.0 LowN/AN/ANov 13, 2026
CVE-2026-127284: SourceCodester Food Ordering System: A security flaw has been discovered in SourceCodester Food Ordering System 1.07.3 High5.5 MediumN/ANov 13, 2026
CVE-2026-127283: SourceCodester Food Ordering System: A vulnerability was identified in SourceCodester Food Ordering System 1.07.3 High5.5 MediumN/ANov 13, 2026
CVE-2026-127282: SourceCodester Smart Attendance System with QR Code Scanner: A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.04.3 Medium2.1 LowN/ANov 13, 2026
CVE-2026-127281: lanyulei ferry: A vulnerability was found in lanyulei ferry 1.0.0-beta.1/1.0.07.3 High5.5 MediumN/ANov 13, 2026
CVE-2026-127279: AIP-PUB ACPs-community: A vulnerability was detected in AIP-PUB ACPs-community up to 2.2.07.3 High5.5 MediumN/ANov 13, 2026
401-425 of 567405