Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-116835: Improperly Controlled Modification of Dynamically-Determined Object AttributesN/A8.7 High0%Nov 12, 2026
CVE-2026-114469: Out-of-bounds Read4.4 MediumN/A0%Nov 12, 2026
CVE-2026-114467: Out-of-bounds Write3.3 LowN/A0%Nov 12, 2026
CVE-2026-114466: Insufficient Granularity of Access Control4.4 MediumN/A0%Nov 12, 2026
CVE-2026-107484: Improper Privilege Management7.3 HighN/A2%Nov 12, 2026
CVE-2026-75869: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A20%Nov 12, 2026
CVE-2026-75868: Incorrect Authorization8.1 HighN/A1%Nov 12, 2026
CVE-2026-75867: Incorrect Authorization8.1 HighN/A1%Nov 12, 2026
CVE-2026-75864: Missing Authorization8.1 HighN/A1%Nov 12, 2026
CVE-2026-19422: Missing Authentication for Critical Function9.1 CriticalN/A2%Nov 12, 2026
CVE-2026-127056: Inefficient Algorithmic Complexity7.5 High8.7 High1%Nov 12, 2026
CVE-2026-127050: Improper Limitation of a Pathname to a Restricted Directory6.4 Medium7.1 High0%Nov 12, 2026
CVE-2026-126994: Use of Externally-Controlled Input to Select Classes or Code6.3 Medium2.1 Low1%Nov 12, 2026
CVE-2026-126993: Inadequate Encryption Strength5.3 Medium5.5 Medium0%Nov 12, 2026
CVE-2026-125870: Incorrect Authorization4.2 Medium2.3 Low0%Nov 12, 2026
CVE-2026-125285: Authentication Bypass Using an Alternate Path or ChannelN/A8.8 High0%Nov 12, 2026
CVE-2026-123139: Improper Verification of Source of a Communication ChannelN/A5.8 Medium0%Nov 12, 2026
CVE-2026-111552: Use of Single-factor Authentication7.1 HighN/A0%Nov 12, 2026
CVE-2026-110951: Weak Password Recovery Mechanism for Forgotten Password7.5 HighN/A0%Nov 12, 2026
CVE-2026-2982: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Nov 12, 2026
CVE-2026-19421: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A2%Nov 12, 2026
CVE-2026-16135: Improper Privilege Management8.8 HighN/A0%Nov 12, 2026
CVE-2026-15309: Improper Privilege Management8.8 HighN/A0%Nov 12, 2026
CVE-2026-13764: Missing Authorization8.8 HighN/A1%Nov 12, 2026
CVE-2026-127046: Exposure of Sensitive Information to an Unauthorized ActorN/A9.2 Critical0%Nov 12, 2026
1076-1100 of 561732