Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-109497: Improper Neutralization of Input During Web Page Generation7.3 HighN/A1%Nov 10, 2026
CVE-2026-109496: Heap-based Buffer Overflow8.8 HighN/A1%Nov 10, 2026
CVE-2026-109495: Missing Authorization6.6 MediumN/A1%Nov 10, 2026
CVE-2026-109494: Heap-based Buffer Overflow8.8 HighN/A1%Nov 10, 2026
CVE-2026-109493: Heap-based Buffer Overflow8.8 HighN/A1%Nov 10, 2026
CVE-2026-109491: Use After Free7.5 HighN/A1%Nov 10, 2026
CVE-2026-109487: Use After Free7.5 HighN/A1%Nov 10, 2026
CVE-2026-109472: Deserialization of Untrusted Data8.8 HighN/A2%Nov 10, 2026
CVE-2026-109466: Missing Authorization8.0 HighN/A0%Nov 10, 2026
CVE-2026-109464: Deserialization of Untrusted Data8.8 HighN/A2%Nov 10, 2026
CVE-2026-109456: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Nov 10, 2026
CVE-2026-109455: Incorrect Authorization6.5 MediumN/A1%Nov 10, 2026
CVE-2026-109454: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A1%Nov 10, 2026
CVE-2026-108455: Out-of-bounds Read6.5 MediumN/A1%Oct 15, 2026
CVE-2026-108454: Buffer Over-read6.5 MediumN/A1%Oct 15, 2026
CVE-2026-108453: Out-of-bounds Read6.5 MediumN/A1%Oct 15, 2026
CVE-2026-108452: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Oct 15, 2026
CVE-2026-108451: Numeric Truncation Error8.8 HighN/A0%Oct 15, 2026
CVE-2026-108450: Heap-based Buffer Overflow8.8 HighN/A0%Oct 15, 2026
CVE-2026-108449: Heap-based Buffer Overflow8.8 HighN/A0%Oct 15, 2026
CVE-2026-108448: Heap-based Buffer Overflow7.5 HighN/A0%Oct 15, 2026
CVE-2026-108447: Heap-based Buffer Overflow8.8 HighN/A0%Oct 15, 2026
CVE-2026-108446: Use After Free8.8 HighN/A0%Oct 15, 2026
CVE-2026-108445: Stack-based Buffer Overflow8.8 HighN/A0%Oct 15, 2026
CVE-2026-108444: Heap-based Buffer Overflow8.8 HighN/A0%Oct 15, 2026
201-225 of 1993