The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2025-47761: Exposed IOCTL with Insufficient Access Control7.8 HighN/A0%Nov 18, 2025
CVE-2025-34324: Improper Verification of Cryptographic Signature7.8 High7.0 High0%Nov 18, 2025
CVE-2025-46373: Heap-based Buffer Overflow7.1 HighN/A0%Nov 18, 2025
CVE-2025-40549: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A1%Nov 18, 2025
CVE-2025-40548: Improper Privilege Management9.1 CriticalN/A1%Nov 18, 2025
CVE-2025-40547: Improper Encoding or Escaping of Output9.1 CriticalN/A1%Nov 18, 2025
CVE-2025-63680: Improper Limitation of a Pathname to a Restricted Directory8.6 HighN/A0%Nov 14, 2025
CVE-2025-4617: Improper Protection of Alternate PathN/A1.1 Low0%Nov 14, 2025
CVE-2024-7021: User Interface (UI) Misrepresentation of Critical Information4.3 MediumN/A0%Nov 14, 2025
CVE-2025-64740: Improper Verification of Cryptographic Signature7.5 HighN/A0%Nov 13, 2025
CVE-2025-62482: Improper Neutralization of Input During Web Page Generation4.3 MediumN/A0%Nov 13, 2025
CVE-2025-12763: Improper Neutralization of Special Elements used in an OS Command6.8 MediumN/A1%Nov 13, 2025
CVE-2025-61667: Incorrect Default PermissionsN/A7.0 High0%Nov 12, 2025
CVE-2025-62452: Heap-based Buffer Overflow8.0 HighN/A1%Nov 11, 2025
CVE-2025-62220: Heap-based Buffer Overflow8.8 HighN/A1%Nov 11, 2025
CVE-2025-62217: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A0%Nov 11, 2025
CVE-2025-62215: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A6%Nov 11, 2025
CVE-2025-62213: Use After Free7.0 HighN/A2%Nov 11, 2025
CVE-2025-62209: Insertion of Sensitive Information into Log File5.5 MediumN/A1%Nov 11, 2025
CVE-2025-62208: Insertion of Sensitive Information into Log File5.5 MediumN/A1%Nov 11, 2025
CVE-2025-60723: Concurrent Execution using Shared Resource with Improper Synchronization6.3 MediumN/A1%Nov 11, 2025
CVE-2025-60721: Privilege Context Switching Error7.8 HighN/A0%Nov 11, 2025
CVE-2025-60720: Buffer Over-read7.8 HighN/A0%Nov 11, 2025
CVE-2025-60719: Untrusted Pointer Dereference7.0 HighN/A2%Nov 11, 2025
CVE-2025-60718: Untrusted Search Path7.8 HighN/A0%Nov 11, 2025
2876-2900 of 16011
‹›