The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2025-23319: Buffer Access with Incorrect Length Value8.1 HighN/A2%Aug 6, 2025
CVE-2025-23318: Buffer Access with Incorrect Length Value8.1 HighN/A1%Aug 6, 2025
CVE-2025-23310: Stack-based Buffer Overflow9.8 CriticalN/A2%Aug 6, 2025
CVE-2025-7771: Exposed IOCTL with Insufficient Access ControlN/A8.7 High7%Aug 6, 2025
CVE-2025-7376: Windows Shortcut Following (.LNK)5.9 MediumN/A0%Aug 6, 2025
CVE-2012-10030: Unrestricted Upload of File with Dangerous Type9.8 Critical9.3 Critical2%Aug 5, 2025
CVE-2025-51060: Improper Access Control6.5 MediumN/A0%Aug 5, 2025
CVE-2025-51726: Use of a Broken or Risky Cryptographic Algorithm8.4 HighN/A0%Aug 4, 2025
CVE-2025-23288: Exposure of Sensitive System Information to an Unauthorized Control Sphere3.3 LowN/A0%Aug 2, 2025
CVE-2025-23287: Exposure of Sensitive System Information to an Unauthorized Control Sphere3.3 LowN/A0%Aug 2, 2025
CVE-2025-23286: Out-of-bounds Read4.4 MediumN/A0%Aug 2, 2025
CVE-2025-23281: Use After Free7.0 HighN/A0%Aug 2, 2025
CVE-2025-23278: Improper Validation of Array Index7.1 HighN/A0%Aug 2, 2025
CVE-2025-23277: Improper Access Control7.3 HighN/A0%Aug 2, 2025
CVE-2025-23276: Files or Directories Accessible to External Parties7.8 HighN/A0%Aug 2, 2025
CVE-2013-10047: Unrestricted Upload of File with Dangerous TypeN/A9.3 Critical1%Aug 1, 2025
CVE-2025-23289: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Jul 31, 2025
CVE-2013-10035: Improper Control of Generation of CodeN/A8.7 High2%Jul 31, 2025
CVE-2025-8151: Improper Limitation of a Pathname to a Restricted Directory4.3 MediumN/A0%Jul 31, 2025
CVE-2025-36071: Missing Release of Resource after Effective Lifetime6.5 MediumN/A0%Jul 29, 2025
CVE-2024-52894: Stack-based Buffer Overflow4.9 MediumN/A0%Jul 29, 2025
CVE-2024-51473: Stack-based Buffer Overflow6.5 MediumN/A0%Jul 29, 2025
CVE-2024-49828: Stack-based Buffer Overflow6.5 MediumN/A0%Jul 29, 2025
CVE-2025-54422: Cleartext Storage of Sensitive Information5.5 Medium6.9 Medium0%Jul 29, 2025
CVE-2025-7676: Uncontrolled Search Path ElementN/A5.4 Medium0%Jul 28, 2025
3301-3325 of 16003
‹›