The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2025-29961: Out-of-bounds Read6.5 MediumN/A1%May 13, 2025
CVE-2025-29960: Out-of-bounds Read6.5 MediumN/A1%May 13, 2025
CVE-2025-29959: Use of Uninitialized Resource6.5 MediumN/A1%May 13, 2025
CVE-2025-29958: Use of Uninitialized Resource6.5 MediumN/A1%May 13, 2025
CVE-2025-29957: Uncontrolled Resource Consumption6.2 MediumN/A1%May 13, 2025
CVE-2025-29956: Buffer Over-read5.4 MediumN/A1%May 13, 2025
CVE-2025-29955: Improper Input Validation6.2 MediumN/A1%May 13, 2025
CVE-2025-29954: Uncontrolled Resource Consumption5.9 MediumN/A1%May 13, 2025
CVE-2025-29840: Stack-based Buffer Overflow8.8 HighN/A1%May 13, 2025
CVE-2025-29839: Out-of-bounds Read4.0 MediumN/A0%May 13, 2025
CVE-2025-29838: NULL Pointer Dereference7.4 HighN/A0%May 13, 2025
CVE-2025-29837: Improper Link Resolution Before File Access5.5 MediumN/A1%May 13, 2025
CVE-2025-29836: Out-of-bounds Read6.5 MediumN/A1%May 13, 2025
CVE-2025-29835: Out-of-bounds Read6.5 MediumN/A1%May 13, 2025
CVE-2025-29833: Time-of-check Time-of-use (TOCTOU) Race Condition7.7 HighN/A0%May 13, 2025
CVE-2025-29832: Out-of-bounds Read6.5 MediumN/A1%May 13, 2025
CVE-2025-29830: Use of Uninitialized Resource6.5 MediumN/A1%May 13, 2025
CVE-2025-29829: Use of Uninitialized Resource5.5 MediumN/A1%May 13, 2025
CVE-2025-27488: Use of Hard-coded Credentials6.7 MediumN/A0%May 13, 2025
CVE-2025-27468: Improper Privilege Management7.0 HighN/A0%May 13, 2025
CVE-2025-24063: Heap-based Buffer Overflow7.8 HighN/A1%May 13, 2025
CVE-2025-43005: Plaintext Storage of a Password4.3 MediumN/A0%May 13, 2025
CVE-2024-9524: Improper Link Resolution Before File Access7.8 HighN/A0%May 9, 2025
CVE-2024-13962: Improper Link Resolution Before File Access7.8 HighN/A0%May 9, 2025
CVE-2024-13961: Improper Link Resolution Before File Access7.8 HighN/A0%May 9, 2025
3551-3575 of 16002
‹›