The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-10135: Totolink: A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-10133: Totolink: A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-10132: Totolink: A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-10131: Totolink: An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s):…9.1 CriticalN/A1%Oct 20, 2026
CVE-2026-109576: HMS Networks: The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list…5.5 Medium6.8 Medium0%Oct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-107929): curl vulnerabilitiesN/AN/A0%Oct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-107928): curl vulnerabilitiesN/AN/A0%Oct 20, 2026
CVE-2026-105960: HMS Networks: PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy5.5 Medium6.8 Medium0%Oct 20, 2026
CVE-2026-103672: HMS Networks: The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then…7.1 High6.9 Medium0%Oct 20, 2026
CVE-2026-101103: HMS Networks: The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold…5.5 Medium6.8 Medium0%Oct 20, 2026
CVE-2016-20104: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High1%Oct 20, 2026
CVE-2016-20103: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High0%Oct 20, 2026
CVE-2016-20102: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2016-20101: Improper Control of Filename for Include/Require Statement in PHP Program8.1 High9.2 Critical0%Oct 20, 2026
CVE-2016-20100: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High1%Oct 20, 2026
CVE-2015-20128: Improper Neutralization of Special Elements used in an SQL Command8.2 High8.8 High0%Oct 20, 2026
CVE-2015-20125: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High0%Oct 20, 2026
CVE-2015-20124: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High0%Oct 20, 2026
CVE-2015-20123: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High0%Oct 20, 2026
CVE-2014-125134: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High1%Oct 20, 2026
CVE-2014-125133: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High1%Oct 20, 2026
CVE-2014-125132: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2014-125131: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2012-20005: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2012-20004: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 20, 2026
4701-4725 of 522616