The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2025-4041: Use of Hard-coded CredentialsN/A9.3 Critical1%May 6, 2025
CVE-2025-43014: Missing Critical Step in Authentication6.1 MediumN/A0%Apr 17, 2025
CVE-2025-43013: Cleartext Transmission of Sensitive Information6.9 MediumN/A0%Apr 17, 2025
CVE-2025-43012: Improper Neutralization of Special Elements used in a Command8.3 HighN/A1%Apr 17, 2025
CVE-2025-42921: Improper Validation of Certificate with Host Mismatch4.2 MediumN/A0%Apr 17, 2025
CVE-2025-2903: Privilege ChainingN/A8.5 High0%Apr 17, 2025
CVE-2025-32433: Missing Authentication for Critical Function10.0 CriticalN/A99%Apr 16, 2025
CVE-2023-5616: Authentication Bypass by Spoofing4.9 MediumN/A0%Apr 15, 2025
CVE-2025-0123: Cleartext Storage of Sensitive InformationN/A5.9 Medium0%Apr 11, 2025
CVE-2025-32755: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)9.1 CriticalN/A0%Apr 10, 2025
CVE-2025-32754: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)9.1 CriticalN/A0%Apr 10, 2025
CVE-2025-32728: Expected Behavior Violation4.3 MediumN/A0%Apr 10, 2025
CVE-2025-27731: Improper Input Validation7.8 HighN/A1%Apr 8, 2025
CVE-2024-41794: Use of Hard-coded Credentials10.0 Critical10.0 Critical1%Apr 8, 2025
CVE-2024-41793: Missing Authentication for Critical Function8.6 High7.7 High1%Apr 8, 2025
CVE-2025-0361: Observable Discrepancy4.3 MediumN/A0%Apr 8, 2025
CVE-2025-3364: Execution with Unnecessary Privileges6.7 MediumN/A0%Apr 8, 2025
CVE-2025-30095: Use of Hard-coded Cryptographic Key9.0 CriticalN/A0%Mar 31, 2025
CVE-2024-45482: Inclusion of Functionality from Untrusted Control SphereN/A8.5 High0%Mar 25, 2025
CVE-2024-45481: Incomplete Filtering of Special ElementsN/A8.5 High0%Mar 25, 2025
CVE-2024-6829: External Control of File Name or Path9.1 CriticalN/A1%Mar 20, 2025
CVE-2024-12866: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A2%Mar 20, 2025
CVE-2024-12777: Synchronous Access of Remote Resource without Timeout5.9 MediumN/A0%Mar 20, 2025
CVE-2024-12390: Improper Link Resolution Before File Access8.8 HighN/A2%Mar 20, 2025
CVE-2024-11042: External Control of File Name or Path9.1 CriticalN/A2%Mar 20, 2025
626-650 of 1961
‹›