The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM
Blog ↗CVE details
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
TitleEitWModules
CVE-2024-45733: Deserialization of Untrusted Data8.8 HighN/A1%Oct 14, 2024
CVE-2024-45731: Relative Path Traversal8.0 HighN/A1%Oct 14, 2024
CVE-2024-45316: Improper Link Resolution Before File Access7.8 HighN/A0%Oct 11, 2024
CVE-2024-45315: Improper Link Resolution Before File Access5.5 MediumN/A0%Oct 11, 2024
CVE-2024-9473: Execution with Unnecessary Privileges7.8 High5.2 Medium0%Oct 9, 2024
CVE-2024-9469: Improper Check for Unusual or Exceptional Conditions5.5 Medium5.7 Medium0%Oct 9, 2024
CVE-2024-45720: Improper Neutralization of Special Elements used in an OS Command8.2 HighN/A1%Oct 9, 2024
CVE-2024-9575: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.5 High1%Oct 9, 2024
CVE-2024-43611: Improper Input Validation8.8 HighN/A2%Oct 8, 2024
CVE-2024-43583: Execution with Unnecessary Privileges7.8 HighN/A1%Oct 8, 2024
CVE-2024-43599: Use After Free8.8 HighN/A1%Oct 8, 2024
CVE-2024-43593: Improper Input Validation8.8 HighN/A2%Oct 8, 2024
CVE-2024-43592: Improper Input Validation8.8 HighN/A2%Oct 8, 2024
CVE-2024-43589: Heap-based Buffer Overflow8.8 HighN/A1%Oct 8, 2024
CVE-2024-43585: Protection Mechanism Failure5.5 MediumN/A0%Oct 8, 2024
CVE-2024-43584: Protection Mechanism Failure7.7 HighN/A1%Oct 8, 2024
CVE-2024-43582: Use After Free8.1 HighN/A3%Oct 8, 2024
CVE-2024-43575: Uncontrolled Resource Consumption7.5 HighN/A2%Oct 8, 2024
CVE-2024-43574: Use After Free8.3 HighN/A1%Oct 8, 2024
CVE-2024-43572: Improper Neutralization7.8 HighN/A67%Oct 8, 2024
CVE-2024-43571: Improper Restriction of Communication Channel to Intended Endpoints5.6 MediumN/A1%Oct 8, 2024
CVE-2024-43570: Use After Free6.4 MediumN/A0%Oct 8, 2024
CVE-2024-43567: Allocation of Resources Without Limits or Throttling7.5 HighN/A2%Oct 8, 2024
CVE-2024-43565: Out-of-bounds Read7.5 HighN/A2%Oct 8, 2024
CVE-2024-43564: Heap-based Buffer Overflow8.8 HighN/A1%Oct 8, 2024
4201-4225 of 16011
‹›