The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2025-62522: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.0 Medium1%Oct 20, 2025
CVE-2025-53950: Exposure of Private Personal Information to an Unauthorized Actor5.5 MediumN/A0%Oct 16, 2025
CVE-2025-53951: Improper Limitation of a Pathname to a Restricted Directory4.9 MediumN/A0%Oct 16, 2025
CVE-2025-6338: Incomplete CleanupN/A9.2 Critical0%Oct 16, 2025
CVE-2025-58132: Improper Neutralization of Special Elements used in a Command4.1 MediumN/A2%Oct 15, 2025
CVE-2025-9548: NULL Pointer Dereference5.5 Medium6.8 Medium0%Oct 15, 2025
CVE-2025-62376: Improper AuthenticationN/A9.5 Critical0%Oct 14, 2025
CVE-2025-59502: Uncontrolled Resource Consumption7.5 HighN/A1%Oct 14, 2025
CVE-2025-59294: Exposure of Sensitive Information to an Unauthorized Actor2.1 LowN/A1%Oct 14, 2025
CVE-2025-59290: Use After Free7.8 HighN/A0%Oct 14, 2025
CVE-2025-59289: Double Free7.0 HighN/A0%Oct 14, 2025
CVE-2025-59287: Deserialization of Untrusted Data9.8 CriticalN/A100%Oct 14, 2025
CVE-2025-59284: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A1%Oct 14, 2025
CVE-2025-59280: Improper Authentication3.1 LowN/A0%Oct 14, 2025
CVE-2025-59278: Improper Validation of Specified Type of Input7.8 HighN/A0%Oct 14, 2025
CVE-2025-59277: Improper Validation of Specified Type of Input7.8 HighN/A0%Oct 14, 2025
CVE-2025-59275: Improper Validation of Specified Type of Input7.8 HighN/A0%Oct 14, 2025
CVE-2025-59259: Improper Validation of Specified Type of Input6.5 MediumN/A2%Oct 14, 2025
CVE-2025-59257: Improper Validation of Specified Type of Input6.5 MediumN/A2%Oct 14, 2025
CVE-2025-59255: Heap-based Buffer Overflow7.8 HighN/A0%Oct 14, 2025
CVE-2025-59254: Heap-based Buffer Overflow7.8 HighN/A1%Oct 14, 2025
CVE-2025-59253: Improper Access Control5.5 MediumN/A0%Oct 14, 2025
CVE-2025-59244: External Control of File Name or Path6.5 MediumN/A1%Oct 14, 2025
CVE-2025-59242: Heap-based Buffer Overflow7.8 HighN/A0%Oct 14, 2025
CVE-2025-59241: Improper Link Resolution Before File Access7.8 HighN/A0%Oct 14, 2025
2976-3000 of 16011
‹›