Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-127058: Unverified Password Change4.9 Medium6.9 MediumN/ANov 12, 2026
CVE-2026-126995: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 LowN/ANov 12, 2026
CVE-2026-124628: Incorrect AuthorizationN/A8.7 HighN/ANov 12, 2026
CVE-2026-124627: Incorrect AuthorizationN/A8.7 HighN/ANov 12, 2026
CVE-2026-124018: Improper Neutralization of Formula Elements in a CSV File7.1 High5.3 MediumN/ANov 12, 2026
CVE-2026-123039: Missing Authorization7.8 HighN/AN/ANov 12, 2026
CVE-2026-120869: Undefined Security WeaknessN/A9.3 CriticalN/ANov 12, 2026
CVE-2026-120490: Incorrect Behavior Order3.8 LowN/AN/ANov 12, 2026
CVE-2026-116835: Improperly Controlled Modification of Dynamically-Determined Object AttributesN/A8.7 HighN/ANov 12, 2026
CVE-2026-114469: Out-of-bounds Read4.4 MediumN/AN/ANov 12, 2026
CVE-2026-114467: Out-of-bounds Write3.3 LowN/AN/ANov 12, 2026
CVE-2026-114466: Insufficient Granularity of Access Control4.4 MediumN/AN/ANov 12, 2026
CVE-2026-107484: Improper Privilege Management7.3 HighN/AN/ANov 12, 2026
CVE-2026-75869: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/AN/ANov 12, 2026
CVE-2026-75868: Incorrect Authorization8.1 HighN/AN/ANov 12, 2026
CVE-2026-75867: Incorrect Authorization8.1 HighN/AN/ANov 12, 2026
CVE-2026-75864: Missing Authorization8.1 HighN/AN/ANov 12, 2026
CVE-2026-19422: Missing Authentication for Critical Function9.1 CriticalN/AN/ANov 12, 2026
CVE-2026-127056: Inefficient Algorithmic Complexity7.5 High8.7 HighN/ANov 12, 2026
CVE-2026-127050: Improper Limitation of a Pathname to a Restricted Directory6.4 Medium7.1 HighN/ANov 12, 2026
CVE-2026-126994: Use of Externally-Controlled Input to Select Classes or Code6.3 Medium2.1 LowN/ANov 12, 2026
CVE-2026-126993: Inadequate Encryption Strength5.3 Medium5.5 MediumN/ANov 12, 2026
CVE-2026-125870: Incorrect Authorization4.2 Medium2.3 LowN/ANov 12, 2026
CVE-2026-125285: Authentication Bypass Using an Alternate Path or ChannelN/A8.8 HighN/ANov 12, 2026
CVE-2026-123139: Improper Verification of Source of a Communication ChannelN/A5.8 MediumN/ANov 12, 2026
1026-1050 of 584382