The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2021-47727: Missing Authentication for Critical Function5.3 Medium8.7 High0%Dec 9, 2025
CVE-2021-47710: Missing Authentication for Critical FunctionN/A8.7 High0%Dec 9, 2025
CVE-2021-47707: Use of Default CredentialsN/A9.3 Critical0%Dec 9, 2025
CVE-2025-62674: Missing Authentication for Critical Function6.8 Medium7.0 High0%Nov 20, 2025
CVE-2025-9983: Missing Authentication for Critical FunctionN/A7.1 High1%Sep 22, 2025
CVE-2025-56578: Improper Authentication5.7 MediumN/A0%Sep 10, 2025
CVE-2025-32333: Incorrect Authorization7.8 HighN/A0%Sep 4, 2025
CVE-2025-30135: Missing Authentication for Critical Function9.4 CriticalN/A1%Jul 25, 2025
CVE-2025-6532: Improper Access Control4.3 Medium2.1 Low0%Jun 24, 2025
CVE-2025-6531: Improper Access Control4.3 Medium2.1 Low0%Jun 24, 2025
CVE-2025-6528: Improper Authentication4.3 Medium2.1 Low1%Jun 23, 2025
CVE-2025-30112: Authentication Bypass Using an Alternate Path or Channel7.1 HighN/A0%Mar 24, 2025
CVE-2025-30141: Improper Access Control7.5 HighN/A0%Mar 18, 2025
CVE-2025-2348: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Mar 16, 2025
CVE-2024-12504: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Jan 23, 2025
CVE-2025-22572: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Jan 7, 2025
CVE-2024-51362: Missing Authentication for Critical Function6.5 MediumN/A0%Nov 5, 2024
CVE-2024-44331: Buffer Copy without Checking Size of Input7.5 HighN/A1%Oct 22, 2024
CVE-2024-47790: Missing AuthorizationN/A8.7 High0%Oct 4, 2024
CVE-2024-46959: Use of Hard-coded Password6.5 MediumN/A0%Sep 18, 2024
CVE-2024-42531: Improper Input Validation9.8 CriticalN/A1%Aug 23, 2024
CVE-2024-3986: Improper Neutralization of Input During Web Page Generation4.8 MediumN/A0%Jul 30, 2024
CVE-2024-28747: Use of Hard-coded Credentials9.8 CriticalN/A1%Jul 9, 2024
CVE-2022-25480: Out-of-bounds Write7.8 HighN/A0%Jul 2, 2024
CVE-2022-25479: Missing Release of Memory after Effective Lifetime5.5 MediumN/A1%Jul 2, 2024
51-75 of 206
‹›