Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-26109: Out-of-bounds Read8.4 HighN/A0%Mar 10, 2026
CVE-2026-26108: Heap-based Buffer Overflow7.8 HighN/A0%Mar 10, 2026
CVE-2026-26107: Use After Free7.8 HighN/A0%Mar 10, 2026
CVE-2026-26106: Improper Input Validation8.8 HighN/A0%Mar 10, 2026
CVE-2026-26134: Integer Overflow or Wraparound7.8 HighN/A0%Mar 10, 2026
CVE-2026-26114: Deserialization of Untrusted Data8.8 HighN/A1%Mar 10, 2026
CVE-2026-26113: Untrusted Pointer Dereference8.4 HighN/A0%Mar 10, 2026
CVE-2026-26112: Untrusted Pointer Dereference7.8 HighN/A0%Mar 10, 2026
CVE-2026-26105: Improper Neutralization of Input During Web Page Generation8.1 HighN/A0%Mar 10, 2026
CVE-2026-25180: Out-of-bounds Read5.5 MediumN/A0%Mar 10, 2026
CVE-2026-24285: Use After Free7.0 HighN/A0%Mar 10, 2026
CVE-2026-20846: Buffer Over-read7.5 HighN/A0%Feb 10, 2026
CVE-2026-21261: Out-of-bounds Read5.5 MediumN/A0%Feb 10, 2026
CVE-2026-21511: Deserialization of Untrusted Data7.5 HighN/A0%Feb 10, 2026
CVE-2026-21514: Reliance on Untrusted Inputs in a Security Decision7.8 HighN/A4%Feb 10, 2026
CVE-2026-21260: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Feb 10, 2026
CVE-2026-21258: Improper Input Validation5.5 MediumN/A0%Feb 10, 2026
CVE-2026-21259: Heap-based Buffer Overflow7.8 HighN/A0%Feb 10, 2026
CVE-2026-21509: Reliance on Untrusted Inputs in a Security Decision7.8 HighN/A7%Jan 26, 2026
CVE-2026-20958: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Jan 13, 2026
CVE-2026-20957: Integer Underflow (Wrap or Wraparound)7.8 HighN/A0%Jan 13, 2026
CVE-2026-20952: Use After Free8.4 HighN/A0%Jan 13, 2026
CVE-2026-20950: Use After Free7.8 HighN/A0%Jan 13, 2026
CVE-2026-20949: Improper Access Control7.8 HighN/A0%Jan 13, 2026
CVE-2026-20948: Untrusted Pointer Dereference7.8 HighN/A0%Jan 13, 2026
876-900 of 1993