The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-116635: AWS aws-serverless-mcp-server: Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless…6.1 Medium6.9 MediumN/ANov 2, 2026
CVE-2026-86596: clavaque: The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <=…9.8 CriticalN/AN/ANov 2, 2026
CVE-2026-120091: Temporal Technologies, Inc. Temporal Server: Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker…N/A8.7 HighN/ANov 2, 2026
CVE-2026-105476: WebPros cPanel: Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned…N/AN/AN/ANov 2, 2026
CVE-2026-105475: WebPros cPanel: Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact…N/A8.7 HighN/ANov 2, 2026
CVE-2026-116958: A flaw was found in konflux-ci6.7 MediumN/AN/ANov 2, 2026
CVE-2026-58873: Google Android XR: In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission…N/AN/AN/ANov 2, 2026
CVE-2026-120503: EchoHS GeekezBrowser: A vulnerability was detected in EchoHS GeekezBrowser up to 1.7.2/1.8.03.3 Low1.9 LowN/ANov 2, 2026
CVE-2026-116768: Absolute Software Secure Access: CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61N/A7.1 HighN/ANov 2, 2026
CVE-2026-58977: Google Android: In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds checkN/AN/AN/ANov 2, 2026
CVE-2026-29508: ReadyMedia ReadyMedia (MiniDLNA): ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that…8.8 High8.7 HighN/ANov 2, 2026
CVE-2026-116767: Absolute Software Secure Access: CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61N/A7.1 HighN/ANov 2, 2026
CVE-2026-58930: Google Android: An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when…N/AN/AN/ANov 2, 2026
CVE-2026-58927: Google Android: The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized…N/AN/AN/ANov 2, 2026
CVE-2026-58926: Google Android: A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t`…N/AN/AN/ANov 2, 2026
CVE-2026-58925: Google Android: The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL…N/AN/AN/ANov 2, 2026
CVE-2026-58924: Google Android: The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` methodN/AN/AN/ANov 2, 2026
CVE-2026-58915: Google Android: A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view…N/AN/AN/ANov 2, 2026
CVE-2026-49906: Google Android: An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an…N/AN/AN/ANov 2, 2026
CVE-2026-49903: Google Android: The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and…N/AN/AN/ANov 2, 2026
CVE-2026-91898: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic…8.1 HighN/AN/ANov 2, 2026
CVE-2026-91894: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability6.7 MediumN/AN/ANov 2, 2026
CVE-2026-91893: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management…7.8 HighN/AN/ANov 2, 2026
CVE-2026-59048: Google Android: In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds checkN/AN/AN/ANov 2, 2026
CVE-2026-59047: Google Android: In multiple locations, there is a possible denial of service due to a logic error in the codeN/AN/AN/ANov 2, 2026
1-25 of 574114
›