The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-12148: Deserialization of Untrusted Data8.8 HighN/A0%Oct 19, 2026
CVE-2026-11831: Heap-based Buffer Overflow5.4 MediumN/A0%Oct 19, 2026
CVE-2026-11829: Buffer Copy without Checking Size of Input6.5 MediumN/A0%Oct 19, 2026
CVE-2026-11828: Buffer Copy without Checking Size of Input5.9 MediumN/A0%Oct 19, 2026
CVE-2026-10743: Race Condition for Write-Once Attributes8.8 HighN/A0%Oct 19, 2026
CVE-2026-10574: Heap-based Buffer Overflow8.8 HighN/A0%Oct 19, 2026
CVE-2026-10572: Heap-based Buffer Overflow8.8 HighN/A0%Oct 19, 2026
CVE-2026-112008: Incorrect Calculation of Buffer Size6.1 Medium6.9 Medium0%Oct 18, 2026
CVE-2026-17491: Improper Privilege Management5.4 MediumN/A0%Oct 16, 2026
CVE-2026-17488: Improper Authentication6.5 MediumN/A0%Oct 16, 2026
CVE-2026-17275: Improper Authorization5.3 MediumN/A0%Oct 16, 2026
CVE-2026-17073: Improper Access Control5.5 MediumN/A0%Oct 16, 2026
CVE-2026-17068: Improper Authorization3.3 LowN/A0%Oct 16, 2026
CVE-2026-107674: Improper Locking4.4 MediumN/A0%Oct 16, 2026
CVE-2026-102917: Improper Privilege Management7.8 HighN/A0%Oct 16, 2026
CVE-2026-109839: Missing Cryptographic Step3.1 LowN/A1%Oct 16, 2026
CVE-2026-109838: Improper Verification of Cryptographic Signature5.1 MediumN/A0%Oct 16, 2026
CVE-2026-111271: Out-of-bounds Read5.5 Medium6.8 Medium0%Oct 15, 2026
CVE-2026-111270: Out-of-bounds Write6.1 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111166: Out-of-bounds Read5.5 Medium6.8 Medium0%Oct 15, 2026
CVE-2026-111165: Out-of-bounds Read5.5 Medium6.8 Medium0%Oct 15, 2026
CVE-2026-111158: Out-of-bounds Read5.5 Medium6.8 Medium0%Oct 15, 2026
CVE-2026-53614: Improper Privilege Management7.0 HighN/A0%Oct 14, 2026
CVE-2026-110602: Access of Uninitialized Pointer6.3 Medium5.8 Medium0%Oct 14, 2026
CVE-2026-98396: Undefined Security WeaknessN/AN/A0%Oct 14, 2026
51-75 of 9776
‹›