The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-48173: Samsung Semiconductor: In the NAS message handler, improper validation of the length field in NAS message causes memory corruptionN/AN/AN/ANov 5, 2026
CVE-2026-35495: Samsung Semiconductor: In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerabilityN/AN/AN/ANov 5, 2026
CVE-2026-35494: Samsung Semiconductor: In the baseband, memory corruption during NAS packet processing can cause a denial of service.N/AN/AN/ANov 5, 2026
CVE-2026-33972: Samsung Semiconductor: In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.N/AN/AN/ANov 5, 2026
CVE-2026-33971: Samsung Semiconductor: In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a…N/AN/AN/ANov 5, 2026
CVE-2026-33969: Samsung Semiconductor: In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop,…N/AN/AN/ANov 5, 2026
CVE-2026-33965: Samsung Semiconductor: An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through…N/AN/AN/ANov 5, 2026
CVE-2026-33958: Samsung Semiconductor: Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a…N/AN/AN/ANov 5, 2026
CVE-2026-122992: G4KLX DStarGateway: In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer…N/A9.2 CriticalN/ANov 5, 2026
CVE-2026-122323: kyverno: Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows…7.5 High8.7 HighN/ANov 5, 2026
CVE-2026-122322: kyverno: Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows…7.5 High8.7 HighN/ANov 5, 2026
CVE-2026-122321: kyverno: Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification…9.1 Critical8.5 HighN/ANov 5, 2026
CVE-2026-122320: kyverno: Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read…7.7 High8.3 HighN/ANov 5, 2026
CVE-2026-122319: kyverno: Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators that allows attackers to…7.5 High8.7 HighN/ANov 5, 2026
CVE-2026-122318: kyverno: Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and…7.7 High7.2 HighN/ANov 5, 2026
CVE-2026-122316: kyverno: Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background…8.5 High8.4 HighN/ANov 5, 2026
CVE-2026-122315: kyverno: Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers…7.5 High8.7 HighN/ANov 5, 2026
CVE-2026-122314: kyverno: Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who…7.5 High8.7 HighN/ANov 5, 2026
CVE-2026-122313: kyverno: Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to…9.9 Critical9.4 CriticalN/ANov 5, 2026
CVE-2026-122312: kyverno: Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch() in…7.7 High8.3 HighN/ANov 5, 2026
CVE-2026-122311: kyverno: Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of resource.get() and…9.9 Critical9.4 CriticalN/ANov 5, 2026
CVE-2026-122310: kyverno: Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it but executes the raw…9.9 Critical9.4 CriticalN/ANov 5, 2026
CVE-2026-122309: kyverno: Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespace-scoped policy authors to exhaust…6.2 Medium8.2 HighN/ANov 5, 2026
CVE-2026-122308: kyverno: Kyverno before 1.19.2 contains an authorization bypass vulnerability in the Generation Handler that allows users with…8.5 High8.4 HighN/ANov 5, 2026
CVE-2026-122307: kyverno: Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerator controller, which folds…7.7 High8.3 HighN/ANov 5, 2026
101-125 of 418286
‹›