The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-58924: Google Android: The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` methodN/AN/AN/ANov 2, 2026
CVE-2026-58915: Google Android: A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view…6.1 MediumN/AN/ANov 2, 2026
CVE-2026-58873: Google Android XR: In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission…8.4 HighN/AN/ANov 2, 2026
CVE-2026-49906: Google Android: An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an…7.8 HighN/AN/ANov 2, 2026
CVE-2026-49903: Google Android: The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and…N/AN/AN/ANov 2, 2026
CVE-2026-29508: ReadyMedia ReadyMedia (MiniDLNA): ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that…8.8 High8.7 HighN/ANov 2, 2026
CVE-2026-16305: INFINITT Healthcare System Manager: Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., LtdN/AN/AN/ANov 2, 2026
CVE-2026-116958: A flaw was found in konflux-ci6.7 MediumN/AN/ANov 2, 2026
CVE-2026-116768: Absolute Software Secure Access: CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61N/A7.1 HighN/ANov 2, 2026
CVE-2026-116767: Absolute Software Secure Access: CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61N/A7.1 HighN/ANov 2, 2026
CVE-2026-116766: Absolute Software Secure Access: CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior…N/A8.3 HighN/ANov 2, 2026
CVE-2026-105476: WebPros cPanel: Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned…8.8 HighN/AN/ANov 2, 2026
CVE-2026-105475: WebPros cPanel: Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact…N/A8.7 HighN/ANov 2, 2026
CVE-2026-120503: EchoHS GeekezBrowser: A vulnerability was detected in EchoHS GeekezBrowser up to 1.7.2/1.8.03.3 Low1.9 LowN/ANov 2, 2026
CVE-2026-97718: Absolute Security Secure Access: CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access serverN/A9.4 CriticalN/ANov 2, 2026
CVE-2026-91901: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for…3.5 LowN/AN/ANov 2, 2026
CVE-2026-91900: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper…5.8 MediumN/AN/ANov 2, 2026
CVE-2026-91899: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic…6.4 MediumN/AN/ANov 2, 2026
CVE-2026-91898: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic…8.1 HighN/AN/ANov 2, 2026
CVE-2026-91897: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Certificate Validation…6.4 MediumN/AN/ANov 2, 2026
CVE-2026-91896: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication Bypass by Spoofing…3.9 LowN/AN/ANov 2, 2026
CVE-2026-91895: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions…7.1 HighN/AN/ANov 2, 2026
CVE-2026-91894: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability6.7 MediumN/AN/ANov 2, 2026
CVE-2026-91893: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management…7.8 HighN/AN/ANov 2, 2026
CVE-2026-86365: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Input Validation vulnerability4.2 MediumN/AN/ANov 2, 2026
701-725 of 528356
‹›