The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2025-48814: Missing Authentication for Critical Function7.5 HighN/A1%Jul 8, 2025
CVE-2025-48811: Missing Support for Integrity Check6.7 MediumN/A0%Jul 8, 2025
CVE-2025-48810: Processor Optimization Removal or Modification of Security-critical Code5.5 MediumN/A0%Jul 8, 2025
CVE-2025-48809: Processor Optimization Removal or Modification of Security-critical Code5.5 MediumN/A0%Jul 8, 2025
CVE-2025-48808: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Jul 8, 2025
CVE-2025-48804: Acceptance of Extraneous Untrusted Data With Trusted Data6.8 MediumN/A1%Jul 8, 2025
CVE-2025-48803: Missing Support for Integrity Check6.7 MediumN/A0%Jul 8, 2025
CVE-2025-48802: Improper Certificate Validation6.5 MediumN/A1%Jul 8, 2025
CVE-2025-48800: Protection Mechanism Failure6.8 MediumN/A1%Jul 8, 2025
CVE-2025-48799: Improper Link Resolution Before File Access7.8 HighN/A1%Jul 8, 2025
CVE-2025-48003: Protection Mechanism Failure6.8 MediumN/A1%Jul 8, 2025
CVE-2025-48002: Integer Overflow or Wraparound5.7 MediumN/A1%Jul 8, 2025
CVE-2025-48001: Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumN/A0%Jul 8, 2025
CVE-2025-48000: Use After Free7.8 HighN/A0%Jul 8, 2025
CVE-2025-47999: Missing Synchronization6.8 MediumN/A0%Jul 8, 2025
CVE-2025-47998: Heap-based Buffer Overflow8.8 HighN/A1%Jul 8, 2025
CVE-2025-47996: Integer Underflow (Wrap or Wraparound)7.8 HighN/A0%Jul 8, 2025
CVE-2025-47987: Heap-based Buffer Overflow7.8 HighN/A2%Jul 8, 2025
CVE-2025-47985: Untrusted Pointer Dereference7.8 HighN/A0%Jul 8, 2025
CVE-2025-47984: Protection Mechanism Failure7.5 HighN/A16%Jul 8, 2025
CVE-2025-47982: Improper Input Validation7.8 HighN/A0%Jul 8, 2025
CVE-2025-47981: Heap-based Buffer Overflow9.8 CriticalN/A33%Jul 8, 2025
CVE-2025-47980: Exposure of Sensitive Information to an Unauthorized Actor6.2 MediumN/A1%Jul 8, 2025
CVE-2025-47978: Out-of-bounds Read6.5 MediumN/A2%Jul 8, 2025
CVE-2025-47976: Use After Free7.8 HighN/A0%Jul 8, 2025
3401-3425 of 16003
‹›