The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-90335: Linux: In the Linux kernel, the following vulnerability has been resolved: tty: skip cdev_del() when no cdev is registered TTY…N/AN/AN/ASep 17, 2026
CVE-2026-90334: Linux: In the Linux kernel, the following vulnerability has been resolved: tty: clear cdev pointer after cdev_add() failure…N/AN/AN/ASep 17, 2026
CVE-2026-90333: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with…N/AN/AN/ASep 17, 2026
CVE-2026-90332: Linux: In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush cached MSI write before…N/AN/AN/ASep 17, 2026
CVE-2026-90331: Linux: In the Linux kernel, the following vulnerability has been resolved: HID: asus: refactor the two workqueues and init…N/AN/AN/ASep 17, 2026
CVE-2026-90330: Linux: In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanup on init…N/AN/AN/ASep 17, 2026
CVE-2026-90329: Linux: In the Linux kernel, the following vulnerability has been resolved: HID: synchronize input before cleaning up a failed…N/AN/AN/ASep 17, 2026
CVE-2026-90328: Linux: In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller…N/AN/AN/ASep 17, 2026
CVE-2026-90327: Linux: In the Linux kernel, the following vulnerability has been resolved: phonet: pep: do not write beyond optlen in…N/AN/AN/ASep 17, 2026
CVE-2026-90326: Linux: In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix race between policy activation and…N/AN/AN/ASep 17, 2026
CVE-2026-90325: Linux: In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: skip dying blkg in…N/AN/AN/ASep 17, 2026
CVE-2026-90324: Linux: In the Linux kernel, the following vulnerability has been resolved: ublk: check import_ubuf() return value…N/AN/AN/ASep 17, 2026
CVE-2026-90323: Linux: In the Linux kernel, the following vulnerability has been resolved: ublk: validate auto buf reg before taking uring_cmd…N/AN/AN/ASep 17, 2026
CVE-2026-90322: Linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2/cluster: keep heartbeat local node stable…N/AN/AN/ASep 17, 2026
CVE-2026-90321: Linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline xattrs during inode block…N/AN/AN/ASep 17, 2026
CVE-2026-90320: Linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading…N/AN/AN/ASep 17, 2026
CVE-2026-90319: Linux: In the Linux kernel, the following vulnerability has been resolved: rapidio: clear mport->net when rio_add_net() fails…N/AN/AN/ASep 17, 2026
CVE-2026-90318: Linux: In the Linux kernel, the following vulnerability has been resolved: fat: release buffer head after rebuilding parent…N/AN/AN/ASep 17, 2026
CVE-2026-90317: Linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Invalidate RCU pointers after final spin…N/AN/AN/ASep 17, 2026
CVE-2026-90316: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/omap: dsi: Do not copy isr table To be able to…N/AN/AN/ASep 17, 2026
CVE-2026-90315: Linux: In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add lockdown checks to legacy I/O and…N/AN/AN/ASep 17, 2026
CVE-2026-90314: Linux: In the Linux kernel, the following vulnerability has been resolved: remoteproc: fix OOB read via signed offset in…N/AN/AN/ASep 17, 2026
CVE-2026-90313: Linux: In the Linux kernel, the following vulnerability has been resolved: bpf, cgroup: Fix invalid storage access after…N/AN/AN/ASep 17, 2026
CVE-2026-90312: Linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Check load-acquire src ptr type before the…N/AN/AN/ASep 17, 2026
CVE-2026-90311: Linux: In the Linux kernel, the following vulnerability has been resolved: thermal: hwmon: Remove hwmon class device along…N/AN/AN/ASep 17, 2026
351-375 of 543158
‹›