Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-118631: Improper Neutralization of Argument Delimiters in a Command3.8 LowN/A0%Nov 12, 2026
CVE-2026-114569: Heap-based Buffer Overflow7.8 HighN/A0%Nov 12, 2026
CVE-2026-114568: Heap-based Buffer Overflow7.8 HighN/A0%Nov 12, 2026
CVE-2026-114567: Out-of-bounds Write7.8 HighN/A0%Nov 12, 2026
CVE-2026-114566: Improper Restriction of Operations within the Bounds of a Memory Buffer7.8 HighN/A0%Nov 12, 2026
CVE-2026-114565: Out-of-bounds Write7.8 HighN/A0%Nov 12, 2026
CVE-2026-114564: Out-of-bounds Write7.8 HighN/A0%Nov 12, 2026
CVE-2026-114563: Stack-based Buffer Overflow7.8 HighN/A0%Nov 12, 2026
CVE-2026-114562: Out-of-bounds Write7.8 HighN/A0%Nov 12, 2026
CVE-2026-114561: Out-of-bounds Write7.8 HighN/A0%Nov 12, 2026
CVE-2026-114560: Out-of-bounds Write7.8 HighN/A0%Nov 12, 2026
CVE-2026-114559: Out-of-bounds Write7.8 HighN/A0%Nov 12, 2026
CVE-2026-114558: Out-of-bounds Write7.8 HighN/A0%Nov 12, 2026
CVE-2026-114556: Improper Limitation of a Pathname to a Restricted Directory7.4 HighN/A1%Nov 12, 2026
CVE-2025-10935: Heap-based Buffer Overflow7.8 HighN/A0%Nov 12, 2026
CVE-2026-126785: Incorrect Default Permissions8.8 High9.3 Critical0%Nov 12, 2026
CVE-2026-126673: Improper Control of Generation of CodeN/AN/A0%Nov 12, 2026
CVE-2026-125787: Missing Authorization5.4 MediumN/A0%Nov 12, 2026
CVE-2026-125786: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.3 MediumN/A0%Nov 12, 2026
CVE-2026-125785: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Nov 12, 2026
CVE-2026-126759: Missing Authentication for Critical Function5.3 Medium5.5 Medium0%Nov 12, 2026
CVE-2026-68549: Improper Limitation of a Pathname to a Restricted Directory3.3 LowN/A0%Nov 11, 2026
CVE-2026-126935: Time-of-check Time-of-use (TOCTOU) Race Condition3.7 Low6.3 Medium0%Nov 11, 2026
CVE-2026-126934: Use of Less Trusted Source6.5 Medium6.9 Medium0%Nov 11, 2026
CVE-2026-126933: Incomplete List of Disallowed Inputs4.3 Medium5.3 Medium0%Nov 11, 2026
1201-1225 of 561732