Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2025-54501: On-Chip Debug and Test Interface With Improper Access ControlN/A5.9 MediumN/ANov 12, 2026
CVE-2024-21954: Improper Check for Unusual or Exceptional ConditionsN/A7.0 HighN/ANov 12, 2026
CVE-2026-81843: Allocation of Resources Without Limits or Throttling6.5 MediumN/AN/ANov 12, 2026
CVE-2026-71363: Missing Authentication for Critical Function5.3 MediumN/AN/ANov 12, 2026
CVE-2026-127204: Insufficient Verification of Data Authenticity7.5 High8.7 HighN/ANov 12, 2026
CVE-2026-127101: NULL Pointer Dereference5.5 MediumN/AN/ANov 12, 2026
CVE-2026-127100: NULL Pointer Dereference5.5 MediumN/AN/ANov 12, 2026
CVE-2026-127099: Stack-based Buffer Overflow5.9 MediumN/AN/ANov 12, 2026
CVE-2026-127063: Use of Default CredentialsN/A9.3 CriticalN/ANov 12, 2026
CVE-2026-126831: Stack-based Buffer Overflow5.5 MediumN/AN/ANov 12, 2026
CVE-2026-126199: Insufficient UI Warning of Dangerous Operations6.8 MediumN/AN/ANov 12, 2026
CVE-2026-126198: Insufficient UI Warning of Dangerous Operations3.1 LowN/AN/ANov 12, 2026
CVE-2026-126197: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/AN/ANov 12, 2026
CVE-2026-126196: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/AN/ANov 12, 2026
CVE-2026-125324: Undefined Security WeaknessN/AN/AN/ANov 12, 2026
CVE-2026-124702: URL Redirection to Untrusted Site7.8 HighN/AN/ANov 12, 2026
CVE-2026-124700: URL Redirection to Untrusted Site7.8 HighN/AN/ANov 12, 2026
CVE-2026-119275: Improper Neutralization of Input During Web Page GenerationN/A7.0 HighN/ANov 12, 2026
CVE-2026-107365: Unintended Proxy or IntermediaryN/A5.3 MediumN/ANov 12, 2026
CVE-2026-106475: Incorrect Authorization7.1 HighN/AN/ANov 12, 2026
CVE-2026-106472: Server-Side Request Forgery (SSRF)6.3 MediumN/AN/ANov 12, 2026
CVE-2026-106154: Uncontrolled Recursion8.6 HighN/AN/ANov 12, 2026
CVE-2026-106146: Uncaught Exception8.6 HighN/AN/ANov 12, 2026
CVE-2026-117544: Exposure of Sensitive Information to an Unauthorized ActorN/A8.2 HighN/ANov 12, 2026
CVE-2026-117542: Path Traversal: '.../...//'N/A5.1 MediumN/ANov 12, 2026
901-925 of 584382