Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-72973: Heap-based Buffer Overflow8.8 HighN/A1%Sep 8, 2026
CVE-2026-72938: Access of Resource Using Incompatible Type6.5 MediumN/A1%Sep 8, 2026
CVE-2026-72972: Heap-based Buffer Overflow8.8 HighN/A1%Sep 8, 2026
CVE-2026-72956: Untrusted Pointer Dereference6.5 MediumN/A1%Sep 8, 2026
CVE-2026-69904: Server-Side Request Forgery (SSRF)3.5 LowN/A1%Sep 8, 2026
CVE-2026-69632: Use After Free8.8 HighN/A1%Sep 8, 2026
CVE-2026-69626: Buffer Over-read6.5 MediumN/A1%Sep 8, 2026
CVE-2026-69477: Heap-based Buffer Overflow7.3 HighN/A0%Sep 8, 2026
CVE-2026-69629: Heap-based Buffer Overflow8.8 HighN/A1%Sep 8, 2026
CVE-2026-69636: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A1%Sep 8, 2026
CVE-2026-69614: Stack-based Buffer Overflow8.8 HighN/A1%Sep 8, 2026
CVE-2026-69464: Execution with Unnecessary Privileges8.8 HighN/A1%Sep 8, 2026
CVE-2026-69615: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Sep 8, 2026
CVE-2026-69442: Heap-based Buffer Overflow8.8 HighN/A1%Sep 8, 2026
CVE-2026-69417: Improper Neutralization of Input During Web Page Generation7.3 HighN/A1%Sep 8, 2026
CVE-2026-69409: Execution with Unnecessary Privileges6.5 MediumN/A1%Sep 8, 2026
CVE-2026-69402: Improper Neutralization of Input During Web Page Generation7.3 HighN/A1%Sep 8, 2026
CVE-2026-64918: Insufficiently Protected Credentials6.5 MediumN/A0%Sep 8, 2026
CVE-2026-69360: Heap-based Buffer Overflow8.8 HighN/A1%Sep 8, 2026
CVE-2026-68843: Use After Free5.5 MediumN/A0%Sep 8, 2026
CVE-2026-78518: Out-of-bounds Read8.8 HighN/A1%Sep 8, 2026
CVE-2026-78509: Heap-based Buffer Overflow9.8 CriticalN/A1%Sep 8, 2026
CVE-2026-78517: Heap-based Buffer Overflow8.8 HighN/A1%Sep 8, 2026
CVE-2026-78504: Stack-based Buffer Overflow8.8 HighN/A1%Sep 8, 2026
CVE-2026-78513: Out-of-bounds Read5.5 MediumN/A1%Sep 8, 2026
501-525 of 1993