The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
Red Hat: CVE-2026-92389: curl: curl: TFTP direction confusionN/AN/AN/AOct 20, 2026
Red Hat: CVE-2026-92388: curl: curl: FTP wildcard write callback mixupN/AN/AN/AOct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-92387): curl vulnerabilitiesN/AN/AN/AOct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-92386): curl vulnerabilitiesN/AN/AN/AOct 20, 2026
CVE-2026-87866: curl: When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not…N/AN/AN/AOct 20, 2026
Ubuntu: USN-8927-1 (CVE-2026-87865): curl vulnerabilitiesN/AN/AN/AOct 20, 2026
Red Hat: CVE-2026-87864: curl: IMAP APPEND plus CRLF conversion command injectionN/AN/AN/AOct 20, 2026
Red Hat: CVE-2026-87863: curl: curl: Hsts Response Erases Persisted EntriesN/AN/AN/AOct 20, 2026
Ubuntu: (Multiple Advisories) (CVE-2026-87862): curl vulnerabilitiesN/AN/AN/AOct 20, 2026
CVE-2026-87861: curl: When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection…N/AN/AN/AOct 20, 2026
CVE-2026-86415: curl: libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already…N/AN/AN/AOct 20, 2026
Red Hat: CVE-2026-86414: curl: curl: leaking host credentials to HTTP proxyN/AN/AN/AOct 20, 2026
CVE-2026-42026: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-42025: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-42024: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-42023: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-42022: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-42021: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-42020: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-42019: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-41223: Totolink: A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-41222: Totolink: A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-40627: Totolink: An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-40615: Totolink: A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-35499: Totolink: An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R…9.1 CriticalN/AN/AOct 20, 2026
1926-1950 of 417319
‹›