The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2025-47975: Double Free7.0 HighN/A0%Jul 8, 2025
CVE-2025-47159: Protection Mechanism Failure7.8 HighN/A0%Jul 8, 2025
CVE-2025-26636: Processor Optimization Removal or Modification of Security-critical Code5.5 MediumN/A0%Jul 8, 2025
CVE-2025-42979: Insecure Storage of Sensitive Information5.6 MediumN/A0%Jul 8, 2025
CVE-2023-50786: Authentication Bypass by Capture-replay4.1 MediumN/A0%Jul 5, 2025
CVE-2025-43713: Deserialization of Untrusted Data6.5 MediumN/A0%Jul 3, 2025
CVE-2025-27461: Missing Authorization7.6 HighN/A0%Jul 3, 2025
CVE-2025-27460: Cleartext Storage of Sensitive Information7.6 HighN/A0%Jul 3, 2025
CVE-2025-36630: Improper Privilege Management8.4 HighN/A0%Jul 2, 2025
CVE-2024-52928: Improper Access Control9.6 CriticalN/A0%Jun 26, 2025
CVE-2025-49797: Files or Directories Accessible to External Parties7.8 High8.5 High0%Jun 25, 2025
CVE-2025-41255: Incorrect Privilege Assignment8.0 HighN/A0%Jun 25, 2025
CVE-2025-6557: Improper Restriction of Rendered UI Layers or Frames5.4 MediumN/A0%Jun 24, 2025
CVE-2025-36537: Incorrect Permission Assignment for Critical Resource7.0 HighN/A0%Jun 24, 2025
CVE-2025-6513: Password in Configuration File9.3 CriticalN/A0%Jun 23, 2025
CVE-2025-6240: Improper Input ValidationN/A4.9 Medium0%Jun 18, 2025
CVE-2022-49976: Undefined Security Weakness5.5 MediumN/A0%Jun 18, 2025
CVE-2022-49963: Undefined Security Weakness7.8 HighN/A0%Jun 18, 2025
CVE-2025-49124: Untrusted Search Path8.4 HighN/A0%Jun 16, 2025
CVE-2025-36632: Incorrect Default Permissions7.8 HighN/A0%Jun 16, 2025
CVE-2025-36633: Improper Privilege Management8.8 HighN/A0%Jun 13, 2025
CVE-2025-36631: Improper Privilege Management8.4 HighN/A0%Jun 13, 2025
CVE-2025-5491: Improper Privilege Management8.8 High8.7 High1%Jun 13, 2025
CVE-2025-4613: Improper Input Validation8.8 High7.1 High1%Jun 12, 2025
CVE-2025-0913: Improper Link Resolution Before File Access5.5 MediumN/A0%Jun 11, 2025
3426-3450 of 16003
‹›