The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-124318: treeio: Treeio through 2.0 contains an insecure deserialization vulnerability in UpdateRecord.get_format_strings and…7.2 High8.6 HighN/ANov 7, 2026
CVE-2026-124317: libexpat: libexpat through 2.10.0 contains an out-of-bounds read vulnerability in unknown_toUtf8() and unknown_toUtf16() in…4.8 Medium6.3 MediumN/ANov 7, 2026
CVE-2026-124316: frappe erpnext: Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the…4.3 Medium5.3 MediumN/ANov 7, 2026
CVE-2026-124315: frappe erpnext: Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the…6.5 Medium7.1 HighN/ANov 7, 2026
CVE-2026-124314: frappe erpnext: Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in…6.5 Medium7.1 HighN/ANov 7, 2026
CVE-2026-124313: frappe erpnext: Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the…4.3 Medium5.3 MediumN/ANov 7, 2026
CVE-2026-124312: fraunhoferhhi vvdec: Fraunhofer HHI VVdeC through 3.2.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash the…4.7 Medium5.7 MediumN/ANov 7, 2026
CVE-2026-124311: fraunhoferhhi vvdec: Fraunhofer HHI VVdeC through 3.2.1 contains a NULL pointer dereference vulnerability in InterPrediction::xPredInterBlk…5.5 Medium6.8 MediumN/ANov 7, 2026
CVE-2026-124310: fraunhoferhhi vvdec: Fraunhofer HHI VVdeC before 3.2.1 contains an out-of-bounds read vulnerability that allows attackers to crash the…6.1 Medium6.9 MediumN/ANov 7, 2026
CVE-2026-124309: fraunhoferhhi vvdec: Fraunhofer HHI VVdeC before 3.2.1 contains a heap out-of-bounds read vulnerability in…6.1 Medium6.9 MediumN/ANov 7, 2026
CVE-2026-124308: fraunhoferhhi vvdec: Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability in DecLibRecon::createSubPicRefBufs…5.8 Medium5.8 MediumN/ANov 7, 2026
CVE-2026-124307: fraunhoferhhi vvdec: Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability that allows attackers to corrupt memory…5.8 Medium5.8 MediumN/ANov 7, 2026
CVE-2026-123989: ESEngine DeepSeek-Reasonix: A vulnerability was found in ESEngine DeepSeek-Reasonix up to 1.33.06.3 Medium5.3 MediumN/ANov 7, 2026
CVE-2026-99282: Linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: fix use-after-free on lower…N/AN/AN/ANov 7, 2026
CVE-2026-99281: Linux: In the Linux kernel, the following vulnerability has been resolved: tun: Require CAP_NET_ADMIN to attach to an…N/AN/AN/ANov 7, 2026
CVE-2026-99280: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: drain session procfs readers before dropping…N/AN/AN/ANov 7, 2026
CVE-2026-99279: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: reclaim ended sessions on logoff and…N/AN/AN/ANov 7, 2026
CVE-2026-99278: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit sessions on each connection The…N/AN/AN/ANov 7, 2026
CVE-2026-99277: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: hold a connection reference for each session…N/AN/AN/ANov 7, 2026
CVE-2026-99276: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer connection scavenging while session…N/AN/AN/ANov 7, 2026
CVE-2026-99275: Linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short SESSION_SETUP responses…N/AN/AN/ANov 7, 2026
CVE-2026-99274: Linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix fiemap wild read on empty…N/AN/AN/ANov 7, 2026
CVE-2026-99273: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: reserve space for the UTF-16 terminator in…N/AN/AN/ANov 7, 2026
CVE-2026-99272: Linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the data area in SMB2_read()…N/AN/AN/ANov 7, 2026
CVE-2026-99271: Linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prev_fbuf on capture buffer…N/AN/AN/ANov 7, 2026
1-25 of 425038
›