The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM
Blog ↗CVE details
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
TitleEitWModules
CVE-2026-88745: n/a: EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell.6.1 MediumN/A0%Sep 21, 2026
CVE-2026-88467: n/a: CRMEB Knowledge-Paid System crmeb_zzff_class 1.4.4 has a backend verification function that returns the wrong type of…N/AN/A0%Sep 21, 2026
CVE-2026-88412: n/a: An integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis module) v4.20.1…5.3 MediumN/A0%Sep 21, 2026
CVE-2026-88411: n/a: Improper error handling in the GRAPH.EFFECT component (/effects/effects_apply.c) of FalkorDB (Redis module) v4.20.1…7.5 HighN/A0%Sep 21, 2026
CVE-2026-88410: n/a: The graph.UDF in FalkorDB (Redis module) v4.20.1 to v4.20.4 is not registered as a write command, leading to unexpected…7.1 HighN/A0%Sep 21, 2026
CVE-2026-88409: n/a: FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the _Decode_GrB_Matrix…8.8 HighN/A0%Sep 21, 2026
CVE-2026-88408: n/a: FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the _GetGroup() function…6.5 MediumN/A0%Sep 21, 2026
CVE-2026-88407: n/a: An out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (Redis module) v4.20.1 to…7.5 HighN/A0%Sep 21, 2026
CVE-2026-88406: n/a: FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the _ValidateUnion_Clauses…7.5 HighN/A0%Sep 21, 2026
CVE-2026-88405: n/a: A remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function…N/AN/A0%Sep 21, 2026
CVE-2026-88404: n/a: A remote code execution (RCE) vulnerability in the UniscriptExecutionService.execute() function…9.8 CriticalN/A0%Sep 21, 2026
CVE-2026-88403: n/a: A Server-Side Request Forgery (SSRF) in the serverRequest function of nocobase v2.1.21 allows authenticated attackers…6.5 MediumN/A0%Sep 21, 2026
CVE-2026-88402: n/a: A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database…9.8 CriticalN/A0%Sep 21, 2026
CVE-2026-79919: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise6.3 MediumN/A0%Sep 21, 2026
CVE-2026-79918: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise6.3 MediumN/A0%Sep 21, 2026
CVE-2026-79917: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise6.5 MediumN/A0%Sep 21, 2026
CVE-2026-79916: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise9.1 CriticalN/A0%Sep 21, 2026
CVE-2026-79317: n/a: A session invalidation flaw exists in x-ui 0.3.24.8 MediumN/A0%Sep 21, 2026
CVE-2026-79316: n/a: An improper access control vulnerability exists in x-ui 0.3.27.6 HighN/A0%Sep 21, 2026
CVE-2026-77525: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise4.2 MediumN/A0%Sep 21, 2026
CVE-2026-77522: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise4.3 MediumN/A0%Sep 21, 2026
CVE-2026-77521: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise10.0 CriticalN/A1%Sep 21, 2026
CVE-2026-77520: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise5.4 MediumN/A0%Sep 21, 2026
CVE-2026-77519: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise5.4 MediumN/A0%Sep 21, 2026
CVE-2026-77518: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise5.0 MediumN/A0%Sep 21, 2026
651-675 of 775503
‹›