The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-114564: OriginLab Origin Viewer: OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114563: OriginLab Origin Viewer: OriginLab Origin Viewer OGWU File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114562: OriginLab Origin Viewer: OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114561: OriginLab Origin Viewer: OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114560: OriginLab Origin Viewer: OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114559: OriginLab Origin Viewer: OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114569: OriginLab Origin Viewer: OriginLab Origin Viewer OGWU File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-122044: Philips Hue Bridge Pro: Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability8.8 HighN/AN/ANov 12, 2026
CVE-2026-118632: Philips Hue Bridge Pro: Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability8.0 HighN/AN/ANov 12, 2026
CVE-2026-118631: Philips Hue Bridge Pro: Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability3.8 LowN/AN/ANov 12, 2026
CVE-2026-121753: Ashlar-Vellum Cobalt: Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-121752: Ashlar-Vellum Cobalt: Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-121744: Ashlar-Vellum Cobalt: Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-121743: Ashlar-Vellum Cobalt: Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-121742: Ashlar-Vellum Cobalt: Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-13269: Quest NetVault Backup: Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability7.5 HighN/AN/ANov 12, 2026
CVE-2026-13270: Quest NetVault Backup: Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability7.5 HighN/AN/ANov 12, 2026
CVE-2026-121741: Trimble SketchUp: Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2025-10935: libilbm: libilbm ILBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-126957: zephyrproject-rtos Zephyr: An integer underflow in Zephyr's IPv4 option handling allows a remote, unauthenticated attacker to read stack memory5.3 Medium6.9 MediumN/ANov 12, 2026
CVE-2026-126795: n/a ToolJet: A vulnerability was determined in ToolJet up to 3.20.256-lts/3.21.93-beta7.3 High5.5 MediumN/ANov 12, 2026
CVE-2026-126785: rmalright TR-VISION HOME: A vulnerability has been found in rmalright TR-VISION HOME 2.0.58.8 High9.3 CriticalN/ANov 12, 2026
CVE-2026-126673: Code InjectionN/AN/AN/ANov 12, 2026
CVE-2026-125787: ExpressTech Quiz And Survey Master: Missing Authorization vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Exploiting…5.4 MediumN/AN/ANov 12, 2026
CVE-2026-125786: ExpressTech Quiz And Survey Master: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ExpressTech Quiz And…5.3 MediumN/AN/ANov 12, 2026
126-150 of 433023