Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-8963: Authentication Bypass by Spoofing7.5 HighN/A0%May 19, 2026
CVE-2026-8962: Protection Mechanism Failure8.1 HighN/A0%May 19, 2026
CVE-2026-8961: Authentication Bypass by Spoofing6.5 MediumN/A0%May 19, 2026
CVE-2026-8960: Authentication Bypass by Spoofing7.5 HighN/A0%May 19, 2026
CVE-2026-8959: Improper Input Validation9.6 CriticalN/A0%May 19, 2026
CVE-2026-8958: Exposure of Resource to Wrong Sphere8.6 HighN/A0%May 19, 2026
CVE-2026-8957: Improper Privilege Management8.8 HighN/A0%May 19, 2026
CVE-2026-8956: Integer Overflow or Wraparound9.8 CriticalN/A1%May 19, 2026
CVE-2026-8955: Improper Privilege Management8.8 HighN/A0%May 19, 2026
CVE-2026-8954: Improper Restriction of Operations within the Bounds of a Memory Buffer7.5 HighN/A0%May 19, 2026
CVE-2026-8953: Use After Free9.6 CriticalN/A1%May 19, 2026
CVE-2026-8952: Improper Privilege Management8.8 HighN/A0%May 19, 2026
CVE-2026-8950: Origin Validation Error9.3 CriticalN/A0%May 19, 2026
CVE-2026-8949: Integer Overflow or Wraparound7.5 HighN/A1%May 19, 2026
CVE-2026-8948: Permissive Cross-domain Policy with Untrusted Domains9.1 CriticalN/A0%May 19, 2026
CVE-2026-8947: Use After Free7.3 HighN/A0%May 19, 2026
CVE-2026-8946: Improper Restriction of Operations within the Bounds of a Memory Buffer7.5 HighN/A1%May 19, 2026
CVE-2026-8401: Protection Mechanism Failure9.8 CriticalN/A0%May 12, 2026
CVE-2026-8391: Improper Input Validation5.3 MediumN/A0%May 12, 2026
CVE-2026-8388: Improper Restriction of Operations within the Bounds of a Memory Buffer6.5 MediumN/A0%May 12, 2026
CVE-2026-8094: Improper Control of Generation of Code9.8 CriticalN/A0%May 7, 2026
CVE-2026-8093: Improper Restriction of Operations within the Bounds of a Memory Buffer8.1 HighN/A0%May 7, 2026
CVE-2026-8092: Out-of-bounds Read8.1 HighN/A0%May 7, 2026
CVE-2026-8091: Improper Check for Unusual or Exceptional Conditions9.8 CriticalN/A0%May 7, 2026
CVE-2026-8090: Use After Free7.3 HighN/A0%May 7, 2026
726-750 of 2523