The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
Gentoo Linux: CVE-2026-114467: git: Multiple Vulnerabilities3.3 LowN/AN/ANov 12, 2026
Gentoo Linux: CVE-2026-114466: git: Multiple Vulnerabilities4.4 MediumN/AN/ANov 12, 2026
CVE-2026-107484: checkpoint: An input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticated,…7.3 HighN/AN/ANov 12, 2026
CVE-2026-120150: n/a PostgreSQL: Use after free in PostgreSQL expanded-record domain checks allows an object creator to execute arbitrary code as the…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120149: n/a PostgreSQL: Heap-based buffer overflow in PostgreSQL foreign batch inserts allows a foreign server to execute arbitrary code, via…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120148: n/a PostgreSQL: Type confusion in PostgreSQL extended statistics allows an object creator to execute arbitrary code as the operating…8.1 HighN/AN/ANov 12, 2026
CVE-2026-120147: n/a PostgreSQL: Use after free in the PostgreSQL dblink extension allows an object creator to execute arbitrary code as the operating…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120145: n/a PostgreSQL: Missing authorization in PostgreSQL logical replication allows a compromised publisher to execute arbitrary code as the…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116330: n/a PostgreSQL: Untrusted data inclusion in PostgreSQL pg_dump tar-format restore.sql allows a compromised origin server to execute…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116329: n/a PostgreSQL: Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116328: n/a PostgreSQL: Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the…8.8 HighN/AN/ANov 12, 2026
CVE-2026-75869: Zohocorp DDI Central: Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass and PowerShell command…8.8 HighN/AN/ANov 12, 2026
CVE-2026-75868: Zohocorp DDI Central: Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass vulnerability that allowed…8.1 HighN/AN/ANov 12, 2026
CVE-2026-75867: Zohocorp DDI Central: Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass vulnerability that allowed…8.1 HighN/AN/ANov 12, 2026
CVE-2026-75864: Zohocorp DDI Central: Zohocorp ManageEngine DDI Central versions below 6301 is affected by an improper authorization vulnerability that…8.1 HighN/AN/ANov 12, 2026
CVE-2026-19422: Zohocorp DDI Central: Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows…9.1 CriticalN/AN/ANov 12, 2026
CVE-2026-127056: mholt PapaParse: PapaParse before 5.7.1 contains an inefficient algorithmic complexity vulnerability that allows remote unauthenticated…7.5 High8.7 HighN/ANov 12, 2026
CVE-2026-127050: inisev Backup Migration: Backup Migration before 2.1.8 for WordPress contains a path traversal vulnerability in its PclZip restore fallback that…6.4 Medium7.1 HighN/ANov 12, 2026
CVE-2026-126994: n/a braindecode: A vulnerability has been found in braindecode up to 1.8.16.3 Medium2.1 LowN/ANov 12, 2026
CVE-2026-126993: SiteServer SSCMS: A security flaw has been discovered in SiteServer SSCMS up to 7.2.25.3 Medium5.5 MediumN/ANov 12, 2026
CVE-2026-125870: bookstackapp bookstack: BookStack before 26.09.3 contains a missing authorization vulnerability in ImageController::checkImagePermission() that…4.2 Medium2.3 LowN/ANov 12, 2026
CVE-2026-125285: TIBCO TIBCO Platform’s Self-Hosted Control Plane: Authentication bypass using an alternate path or channel vulnerability in TIBCO TIBCO Platform’s Self-Hosted Control…N/A8.8 HighN/ANov 12, 2026
CVE-2026-123139: Opera Neon: Improper verification of the source of a communication channel vulnerability in Opera Neon on macOS and Windows allows…N/A5.8 MediumN/ANov 12, 2026
CVE-2026-111552: Hyper Teknoloji Ltd. Şti.: Use of single-factor authentication vulnerability in Hyper Teknoloji Ltd7.1 HighN/AN/ANov 12, 2026
CVE-2026-110951: Hyper Teknoloji Ltd. Şti.: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hyper Teknoloji Ltd7.5 HighN/AN/ANov 12, 2026
951-975 of 532044