Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-126349: sporkmonger addressable: Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library3.1 LowN/A0%Nov 12, 2026
CVE-2026-126348: sporkmonger addressable: Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library4.3 MediumN/A0%Nov 12, 2026
CVE-2026-126347: tornadoweb tornado: Tornado is a Python web framework and asynchronous networking library3.1 LowN/A0%Nov 12, 2026
CVE-2026-126346: patrickjuchli basic-ftp: basic-ftp is an FTP client for Node.js5.9 MediumN/A2%Nov 12, 2026
CVE-2026-126345: patrickjuchli basic-ftp: basic-ftp is an FTP client for Node.js5.3 MediumN/A0%Nov 12, 2026
CVE-2026-126344: honojs node-server: @hono/node-server allows running the Hono application on Node.js5.4 MediumN/A0%Nov 12, 2026
CVE-2026-126343: honojs node-server: @hono/node-server allows running the Hono application on Node.js5.3 MediumN/A0%Nov 12, 2026
CVE-2026-126210: honojs node-server: @hono/node-server allows running the Hono application on Node.js5.3 MediumN/A0%Nov 12, 2026
CVE-2026-86324: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Nov 12, 2026
CVE-2026-86323: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Nov 12, 2026
CVE-2026-86322: Authorization Bypass Through User-Controlled Key8.8 HighN/A0%Nov 12, 2026
CVE-2026-127208: datamodel-code-generator: datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows attackers to achieve…8.8 High8.6 High0%Nov 12, 2026
CVE-2026-127207: Missing Authorization5.4 Medium5.3 Medium0%Nov 12, 2026
CVE-2026-127206: Guessable CAPTCHA5.3 Medium6.9 Medium0%Nov 12, 2026
CVE-2026-126793: AWS aws-advanced-go-wrapper: An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release…8.0 High8.6 High0%Nov 12, 2026
CVE-2026-126209: flavorjones loofah: Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of NokogiriN/A5.3 Medium0%Nov 12, 2026
CVE-2026-126208: flavorjones loofah: Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri4.7 MediumN/A0%Nov 12, 2026
CVE-2026-126207: Incorrect Behavior Order: Validate Before Canonicalize4.7 MediumN/A0%Nov 12, 2026
CVE-2026-126206: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Nov 12, 2026
CVE-2026-126205: Uncontrolled Resource Consumption5.3 MediumN/A0%Nov 12, 2026
CVE-2026-106018: Authentication Bypass Using an Alternate Path or ChannelN/A8.7 High0%Nov 12, 2026
CVE-2026-68548: Improper Handling of Case Sensitivity9.4 CriticalN/A1%Nov 12, 2026
CVE-2026-52786: Improper Validation of Array Index7.1 HighN/A0%Nov 12, 2026
CVE-2026-47711: Stack-based Buffer Overflow8.6 HighN/A0%Nov 12, 2026
CVE-2026-47710: Stack-based Buffer Overflow8.2 HighN/A0%Nov 12, 2026
851-875 of 563784