Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2025-10935: Heap-based Buffer Overflow7.8 HighN/A0%Nov 12, 2026
CVE-2026-126785: Incorrect Default Permissions8.8 High9.3 Critical0%Nov 12, 2026
CVE-2026-126673: Improper Control of Generation of CodeN/AN/A0%Nov 12, 2026
CVE-2026-125787: Missing Authorization5.4 MediumN/A0%Nov 12, 2026
CVE-2026-125786: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.3 MediumN/A0%Nov 12, 2026
CVE-2026-125785: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 12, 2026
CVE-2026-126759: Missing Authentication for Critical Function5.3 Medium5.5 Medium0%Nov 12, 2026
CVE-2026-68549: Improper Limitation of a Pathname to a Restricted Directory3.3 LowN/A0%Nov 11, 2026
CVE-2026-126935: Time-of-check Time-of-use (TOCTOU) Race Condition3.7 Low6.3 Medium0%Nov 11, 2026
CVE-2026-126934: Use of Less Trusted Source6.5 Medium6.9 Medium0%Nov 11, 2026
CVE-2026-126933: Incomplete List of Disallowed Inputs4.3 Medium5.3 Medium0%Nov 11, 2026
CVE-2026-126932: Unrestricted Upload of File with Dangerous Type4.3 Medium5.3 Medium0%Nov 11, 2026
CVE-2026-126922: Out-of-bounds Read3.1 LowN/A0%Nov 11, 2026
CVE-2026-126921: Use After Free8.8 HighN/A0%Nov 11, 2026
CVE-2026-126920: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Nov 11, 2026
CVE-2026-126919: Use After Free8.8 HighN/A0%Nov 11, 2026
CVE-2026-126918: Use After Free8.8 HighN/A0%Nov 11, 2026
CVE-2026-126917: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A0%Nov 11, 2026
CVE-2026-126916: Integer Overflow or Wraparound8.8 HighN/A0%Nov 11, 2026
CVE-2026-126915: Use of Uninitialized Variable7.5 HighN/A0%Nov 11, 2026
CVE-2026-126914: Use of Uninitialized Resource4.3 MediumN/A0%Nov 11, 2026
CVE-2026-126913: Out-of-bounds Read3.4 LowN/A0%Nov 11, 2026
CVE-2026-126912: Heap-based Buffer Overflow9.6 CriticalN/A0%Nov 11, 2026
CVE-2026-126911: Use After Free8.8 HighN/A0%Nov 11, 2026
CVE-2026-126910: Access of Resource Using Incompatible Type8.8 HighN/A0%Nov 11, 2026
1201-1225 of 425070