The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2025-36008: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Nov 7, 2025
CVE-2025-36006: Improper Resource Shutdown or Release6.5 MediumN/A0%Nov 7, 2025
CVE-2025-2534: Memory Allocation with Excessive Size Value5.3 MediumN/A0%Nov 7, 2025
CVE-2024-47118: Stack-based Buffer Overflow6.5 MediumN/A0%Nov 7, 2025
CVE-2025-11212: User Interface (UI) Misrepresentation of Critical Information6.3 MediumN/A0%Nov 6, 2025
CVE-2025-27918: Integer Overflow or Wraparound9.8 CriticalN/A0%Nov 6, 2025
CVE-2025-27917: NULL Pointer Dereference7.5 HighN/A0%Nov 6, 2025
CVE-2025-27916: Authentication Bypass by Spoofing7.5 HighN/A0%Nov 6, 2025
CVE-2025-37735: Improper Preservation of Permissions7.0 HighN/A0%Nov 6, 2025
CVE-2025-64151: Unquoted Search Path or Element6.7 Medium8.4 High0%Nov 5, 2025
CVE-2025-62225: Unquoted Search Path or Element6.7 Medium8.4 High0%Nov 5, 2025
CVE-2025-64107: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A0%Nov 4, 2025
CVE-2025-59596: Improper Input Validation6.5 Medium6.0 Medium0%Nov 4, 2025
CVE-2025-23358: Uncontrolled Search Path Element8.2 HighN/A0%Nov 4, 2025
CVE-2025-60892: Exposure of Sensitive Information to an Unauthorized Actor6.8 MediumN/A0%Nov 3, 2025
CVE-2025-12507: Unquoted Search Path or Element8.8 HighN/A0%Oct 31, 2025
CVE-2025-48982: Improper Privilege Management7.8 HighN/A0%Oct 31, 2025
CVE-2025-1549: Improper Neutralization of Special Elements used in a CommandN/A6.3 Medium0%Oct 29, 2025
CVE-2025-62801: Improper Neutralization of Special Elements used in an OS Command7.8 High5.4 Medium0%Oct 28, 2025
CVE-2025-55754: Improper Neutralization of Escape, Meta, or Control Sequences9.6 CriticalN/A10%Oct 27, 2025
CVE-2025-12055: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A4%Oct 27, 2025
CVE-2025-23345: Out-of-bounds Read4.4 MediumN/A0%Oct 23, 2025
CVE-2025-61865: Unquoted Search Path or Element6.7 Medium8.4 High0%Oct 23, 2025
CVE-2025-11575: Incorrect Default Permissions7.8 High8.8 High0%Oct 23, 2025
CVE-2025-61303: Uncontrolled Resource Consumption9.8 CriticalN/A0%Oct 20, 2025
2951-2975 of 16011
‹›