Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-127204: Insufficient Verification of Data Authenticity7.5 High8.7 HighN/ANov 12, 2026
CVE-2026-127101: NULL Pointer Dereference5.5 MediumN/AN/ANov 12, 2026
CVE-2026-127100: NULL Pointer Dereference5.5 MediumN/AN/ANov 12, 2026
CVE-2026-127099: Stack-based Buffer Overflow5.9 MediumN/AN/ANov 12, 2026
CVE-2026-127063: Use of Default CredentialsN/A9.3 CriticalN/ANov 12, 2026
CVE-2026-126831: Stack-based Buffer Overflow5.5 MediumN/AN/ANov 12, 2026
CVE-2026-126199: Insufficient UI Warning of Dangerous Operations6.8 MediumN/AN/ANov 12, 2026
CVE-2026-126198: Insufficient UI Warning of Dangerous Operations3.1 LowN/AN/ANov 12, 2026
CVE-2026-126197: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/AN/ANov 12, 2026
CVE-2026-126196: Improper Neutralization of Special Elements used in an SQL Command8.1 HighN/AN/ANov 12, 2026
CVE-2026-125324: Undefined Security WeaknessN/AN/AN/ANov 12, 2026
CVE-2026-124702: URL Redirection to Untrusted Site7.8 HighN/AN/ANov 12, 2026
CVE-2026-124700: URL Redirection to Untrusted Site7.8 HighN/AN/ANov 12, 2026
CVE-2026-119275: Improper Neutralization of Input During Web Page GenerationN/A7.0 HighN/ANov 12, 2026
CVE-2026-107365: Unintended Proxy or IntermediaryN/A5.3 MediumN/ANov 12, 2026
CVE-2026-106475: Incorrect Authorization7.1 HighN/AN/ANov 12, 2026
CVE-2026-106472: Server-Side Request Forgery (SSRF)6.3 MediumN/AN/ANov 12, 2026
CVE-2026-106154: Uncontrolled Recursion8.6 HighN/AN/ANov 12, 2026
CVE-2026-106146: Uncaught Exception8.6 HighN/AN/ANov 12, 2026
CVE-2026-117544: Exposure of Sensitive Information to an Unauthorized ActorN/A8.2 HighN/ANov 12, 2026
CVE-2026-117542: Path Traversal: '.../...//'N/A5.1 MediumN/ANov 12, 2026
CVE-2026-120467: Authorization Bypass Through User-Controlled KeyN/A7.1 HighN/ANov 12, 2026
CVE-2026-120468: Exposure of Sensitive Information to an Unauthorized ActorN/A6.9 MediumN/ANov 12, 2026
CVE-2026-117551: Unrestricted Upload of File with Dangerous TypeN/A10.0 CriticalN/ANov 12, 2026
CVE-2026-120471: Missing AuthorizationN/A6.9 MediumN/ANov 12, 2026
926-950 of 584382