The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-116835: Octopus Deploy Octopus Server: In affected versions of Octopus Server, insufficient validation of custom claims on OIDC accounts allowed a user with…N/A8.7 HighN/ANov 12, 2026
CVE-2026-114469: Git: Out-of-bounds read can crash git-apply(1) when binary patch inflates to very large size4.4 MediumN/AN/ANov 12, 2026
CVE-2026-114467: Git: Out-of-bounds write possible in Git when git-merge(1) used on tag with more than two GPG signatures3.3 LowN/AN/ANov 12, 2026
CVE-2026-114466: Git: Arbitrary data can be read or written through git-fast-import(1) and git-fast-export(1) features not marked unsafe4.4 MediumN/AN/ANov 12, 2026
CVE-2026-107484: checkpoint: An input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticated,…7.3 HighN/AN/ANov 12, 2026
CVE-2026-6467: n/a PostgreSQL: Uncontrolled search path element in PostgreSQL CREATE EXTENSION allows an attacker with database-level CREATE privilege…7.2 HighN/AN/ANov 12, 2026
CVE-2026-6460: n/a PostgreSQL: Type confusion in PostgreSQL allows an object creator to execute arbitrary code as the operating system user running…8.8 HighN/AN/ANov 12, 2026
CVE-2026-18447: n/a PostgreSQL: Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating…8.8 HighN/AN/ANov 12, 2026
CVE-2026-16240: n/a PostgreSQL: Use of externally-controlled format string in PostgreSQL pg_basebackup allows an attacker having already compromised a…3.7 LowN/AN/ANov 12, 2026
CVE-2026-16237: n/a PostgreSQL: Improper protection in PostgreSQL INSERT ..5.4 MediumN/AN/ANov 12, 2026
CVE-2026-14661: n/a PostgreSQL: External control of file name in PostgreSQL dblink and CREATE/ALTER SUBSCRIPTION allows a user to achieve persistent…8.1 HighN/AN/ANov 12, 2026
CVE-2026-120154: n/a PostgreSQL: Improper protection in PostgreSQL INSERT ..4.3 MediumN/AN/ANov 12, 2026
CVE-2026-120153: n/a PostgreSQL: SQL injection in PostgreSQL extension-script substitutions allows an attacker with database-level CREATE privilege to…7.2 HighN/AN/ANov 12, 2026
CVE-2026-120152: n/a PostgreSQL: Use after free in PostgreSQL pg_show_all_settings() allows a database user to retrieve memory contents, via loading a…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-120151: n/a PostgreSQL: Type confusion in PostgreSQL plpgsql record-field assignment allows an object creator to execute arbitrary code as the…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120144: n/a PostgreSQL: Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120143: n/a PostgreSQL: Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120142: n/a PostgreSQL: Type confusion in PostgreSQL anonymous RECORD types allows an object creator to execute arbitrary code as the operating…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120141: n/a PostgreSQL: Type confusion in PostgreSQL materialized set-returning functions allows a database user to execute arbitrary code as…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120139: n/a PostgreSQL: Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116336: n/a PostgreSQL: Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116335: n/a PostgreSQL: Type confusion in PostgreSQL operator commutator and negator links allows an object creator to execute arbitrary code…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116333: n/a PostgreSQL: Buffer over-read in PostgreSQL parallel B-tree scans allows an object creator to read attacker-chosen server-memory…6.5 MediumN/AN/ANov 12, 2026
CVE-2026-116332: n/a PostgreSQL: Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116331: n/a PostgreSQL: Type confusion in PostgreSQL min/max aggregate optimization allows an object creator to execute arbitrary code as the…8.8 HighN/AN/ANov 12, 2026
176-200 of 433023