The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-119301: AWS aws-sdk-pandas: Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS…7.9 High5.0 MediumN/ANov 2, 2026
CVE-2026-106807: n/a: A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling pathN/AN/AN/ANov 2, 2026
CVE-2026-106805: n/a: A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handlingN/AN/AN/ANov 2, 2026
CVE-2026-106804: n/a: A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module7.5 HighN/AN/ANov 2, 2026
CVE-2026-106803: n/a: A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module9.8 CriticalN/AN/ANov 2, 2026
CVE-2026-105769: chainguard kaniko: kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an…9.3 CriticalN/AN/ANov 2, 2026
CVE-2026-65059: Improper Handling of Highly Compressed DataN/AN/AN/ANov 2, 2026
CVE-2026-88811: SUSE Rancher: Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to…9.1 CriticalN/AN/ANov 2, 2026
CVE-2026-88810: SUSE Rancher: A privilege escalation issue was discovered in Rancher Manager's role-based access control7.2 HighN/AN/ANov 2, 2026
CVE-2026-99240: Linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damos_commit_quota_goal() for…N/AN/AN/ANov 2, 2026
CVE-2026-99239: Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: refuse __l2cap_chan_add if chan…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99238: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when updating…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99237: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when resetting last…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99236: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Reject incomplete event filter expressions…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99235: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Save the event file instead of the…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99234: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Unregister field variable histograms when…N/AN/AN/ANov 2, 2026
CVE-2026-99233: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Verify event_call identity when…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99232: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing/syscalls: Use copy_from_user for the…N/AN/AN/ANov 2, 2026
CVE-2026-99231: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: own the request before clearing…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99230: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: don't leave list poison in…N/AN/AN/ANov 2, 2026
CVE-2026-99229: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/wait: don't spin on a stuck overflow list…N/AN/AN/ANov 2, 2026
CVE-2026-99228: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't lose the signal that ends…N/AN/AN/ANov 2, 2026
CVE-2026-99227: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: prevent cancel reference wrap…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99226: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: Avoid the owner account dereference in named…N/AN/AN/ANov 2, 2026
CVE-2026-99225: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in process…N/AN/AN/ANov 2, 2026
901-925 of 528356
‹›