The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120758: The HDF Group HDF5: HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.cN/A5.4 MediumN/ANov 3, 2026
CVE-2026-65168: NVIDIA Slurm: NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code.7.0 HighN/AN/ANov 3, 2026
CVE-2026-65165: NVIDIA Slurm: NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-65140: NVIDIA Slurm: NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that…5.7 MediumN/AN/ANov 3, 2026
CVE-2026-65139: NVIDIA Slurm: NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary…6.3 MediumN/AN/ANov 3, 2026
CVE-2026-120757: The HDF Group HDF5: HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal.c, the…N/A6.9 MediumN/ANov 3, 2026
CVE-2026-65138: NVIDIA Slurm: NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to…6.3 MediumN/AN/ANov 3, 2026
CVE-2026-65109: NVIDIA Slurm: NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to…4.7 MediumN/AN/ANov 3, 2026
CVE-2026-121578: Amidaware Tactical RMM: Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for various…N/AN/AN/ANov 3, 2026
CVE-2026-120756: The HDF Group HDF5: HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserialize() in src/H5Ocache.cN/A1.9 LowN/ANov 3, 2026
CVE-2026-121564: lucasrodes whatstk: Incomplete Comparison with Missing Factors (CWE-1023) in merge_chats() (whatstk/utils/chat_merge.py), reached from…N/A1.8 LowN/ANov 3, 2026
CVE-2026-120754: The HDF Group Scale-Offset Filter: HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scaleoffset() in…N/A1.9 LowN/ANov 3, 2026
CVE-2026-97350: Securepoint Securepoint SSL VPN Client v2: Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy…N/A6.9 MediumN/ANov 3, 2026
CVE-2026-65108: NVIDIA Slurm: NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd…6.3 MediumN/AN/ANov 3, 2026
CVE-2026-65107: NVIDIA Slurm: NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file…6.3 MediumN/AN/ANov 3, 2026
CVE-2026-43603: AMD: A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…N/A6.9 MediumN/ANov 3, 2026
CVE-2026-40661: AMD AMD Compressionator SDK: An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to…N/A5.2 MediumN/ANov 3, 2026
CVE-2026-40660: AMD AMD Compressionator SDK: A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local…N/A5.2 MediumN/ANov 3, 2026
CVE-2026-40659: AMD AMD Compressionator SDK: An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a…N/A5.1 MediumN/ANov 3, 2026
CVE-2026-121513: D3TN GmbH µD3TN: Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS7.5 HighN/AN/ANov 3, 2026
CVE-2026-121512: D3TN GmbH µD3TN: Memory Leak with Amplification in µD3TN BPv6 EID Reference Handling allows Unauthenticated Remote Attacker to Cause DoS7.5 HighN/AN/ANov 3, 2026
CVE-2026-121511: D3TN GmbH µD3TN: Heap Out-of-Bounds Read in µD3TN BPv6/BPv7 Fragmenter allows Local Attacker to Read Memory and Reliably Cause DoS7.1 HighN/AN/ANov 3, 2026
CVE-2026-121510: D3TN GmbH µD3TN: Remote Unauthenticated Heap Out-of-Bounds Write in µD3TN BPv6 Administrative Record Parser allows Unauthenticated…7.5 HighN/AN/ANov 3, 2026
CVE-2026-121508: D3TN GmbH µD3TN: Use-After-Free in µD3TN BPv6 Fragmenter Cleanup allows Unauthenticated Remote Attacker to Cause DoS on Allocation…5.9 MediumN/AN/ANov 3, 2026
CVE-2026-121507: D3TN GmbH µD3TN: Double Free in µD3TN BPv6 Fragmenter Block Duplication allows Unauthenticated Remote Attacker to Cause DoS on…5.9 MediumN/AN/ANov 3, 2026
101-125 of 528356
‹›