Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-110059: Heap-based Buffer Overflow8.8 HighN/A1%Nov 10, 2026
CVE-2026-110058: Heap-based Buffer Overflow8.8 HighN/A1%Nov 10, 2026
CVE-2026-110057: Authorization Bypass Through User-Controlled Key6.5 MediumN/A1%Nov 10, 2026
CVE-2026-110056: Heap-based Buffer Overflow7.8 HighN/A1%Nov 10, 2026
CVE-2026-110055: Heap-based Buffer Overflow8.8 HighN/A1%Nov 10, 2026
CVE-2026-110054: Heap-based Buffer Overflow8.8 HighN/A1%Nov 10, 2026
CVE-2026-110053: Heap-based Buffer Overflow7.5 HighN/A1%Nov 10, 2026
CVE-2026-110052: Use After Free7.5 HighN/A1%Nov 10, 2026
CVE-2026-110051: Incorrect Conversion between Numeric Types6.5 MediumN/A1%Nov 10, 2026
CVE-2026-110050: Heap-based Buffer Overflow8.8 HighN/A1%Nov 10, 2026
CVE-2026-110049: Heap-based Buffer Overflow7.8 HighN/A1%Nov 10, 2026
CVE-2026-110048: Heap-based Buffer Overflow8.8 HighN/A1%Nov 10, 2026
CVE-2026-110047: Use After Free8.8 HighN/A1%Nov 10, 2026
CVE-2026-110046: Off-by-one Error6.5 MediumN/A1%Nov 10, 2026
CVE-2026-110045: Improper Neutralization of Input During Web Page Generation7.3 HighN/A1%Nov 10, 2026
CVE-2026-110044: Deserialization of Untrusted Data8.8 HighN/A2%Nov 10, 2026
CVE-2026-110043: Heap-based Buffer Overflow8.8 HighN/A1%Nov 10, 2026
CVE-2026-109505: Stack-based Buffer Overflow8.8 HighN/A1%Nov 10, 2026
CVE-2026-109504: Improper Neutralization of Input During Web Page Generation7.3 HighN/A1%Nov 10, 2026
CVE-2026-109503: Double Free8.8 HighN/A1%Nov 10, 2026
CVE-2026-109502: Server-Side Request Forgery (SSRF)8.8 HighN/A1%Nov 10, 2026
CVE-2026-109501: Out-of-bounds Read8.8 HighN/A1%Nov 10, 2026
CVE-2026-109500: Heap-based Buffer Overflow7.5 HighN/A1%Nov 10, 2026
CVE-2026-109499: Access of Resource Using Incompatible Type8.8 HighN/A1%Nov 10, 2026
CVE-2026-109498: Heap-based Buffer Overflow7.5 HighN/A1%Nov 10, 2026
176-200 of 1993