The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-123798: supertokens supertokens-core: SuperTokens Core is an open source authentication server8.1 HighN/AN/ANov 9, 2026
CVE-2026-121769: axew3.com WP w3all phpBB: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axew3.com WP…8.5 HighN/AN/ANov 9, 2026
CVE-2026-121573: Melapress WP Activity Log: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP…6.5 MediumN/AN/ANov 9, 2026
CVE-2026-120834: Tobias WP2LEADS: Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects…7.3 HighN/AN/ANov 9, 2026
CVE-2026-119079: Red Hat: decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded…7.5 HighN/AN/ANov 9, 2026
CVE-2026-112323: Red Hat: The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote…7.5 HighN/AN/ANov 9, 2026
CVE-2026-112322: Red Hat: clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client…7.5 HighN/AN/ANov 9, 2026
CVE-2026-112321: Red Hat: The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on…7.5 HighN/AN/ANov 9, 2026
CVE-2026-112320: Red Hat: The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication…7.5 HighN/AN/ANov 9, 2026
CVE-2026-112319: Red Hat: The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote…6.5 MediumN/AN/ANov 9, 2026
CVE-2026-112318: Red Hat: The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL…6.5 MediumN/AN/ANov 9, 2026
CVE-2026-112317: Red Hat: krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key…5.3 MediumN/AN/ANov 9, 2026
CVE-2026-112316: Red Hat: xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on…6.5 MediumN/AN/ANov 9, 2026
CVE-2026-112315: Red Hat: The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free…5.3 MediumN/AN/ANov 9, 2026
CVE-2026-112314: Red Hat: clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries,…7.5 HighN/AN/ANov 9, 2026
CVE-2026-125264: FFmpeg: FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in parse_frame_header() in…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125263: FFmpeg: FFmpeg 9.0 through 9.0.2 built with liblcevc_dec fails to validate LCEVC enhanced output dimensions against max_pixels…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125258: FFmpeg: FFmpeg through 9.0.2 contains a division by zero vulnerability in dovi_configure_ext() in libavcodec/dovi_rpuenc.c that…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125254: FFmpeg: FFmpeg through 9.0.2 contains a division by zero vulnerability in the VVC decoder because ff_vvc_slice_rpl() fails to…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125252: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vaapi_decode.c that allows attackers to exhaust…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125246: FFmpeg: FFmpeg through 9.0.2 contains a denial of service vulnerability in cbs_jpeg_assemble_fragment() that miscounts 0xff…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125245: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in ff_mjpeg_decode_sof() in libavcodec/mjpegdec.c, which…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125242: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vdpau.c that allows attackers to exhaust heap…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125240: FFmpeg: FFmpeg through 9.0.2 contains a resource leak vulnerability in svt_jpegxs_dec_decode() in libsvtjpegxsdec.c that leaks…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125238: FFmpeg: FFmpeg through 9.0.2 contains a reachable assertion vulnerability in libxevd_receive_frame() in libavcodec/libxevd.c…5.5 Medium6.8 MediumN/ANov 9, 2026
126-150 of 427771
‹›