The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2023-53251: NULL Pointer Dereference5.5 MediumN/A0%Sep 15, 2025
CVE-2023-53250: NULL Pointer Dereference5.5 MediumN/A0%Sep 15, 2025
CVE-2023-53249: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Sep 15, 2025
CVE-2023-53248: NULL Pointer Dereference5.5 MediumN/A0%Sep 15, 2025
CVE-2023-53247: Reachable Assertion5.5 MediumN/A0%Sep 15, 2025
CVE-2023-53246: NULL Pointer Dereference5.5 MediumN/A0%Sep 15, 2025
CVE-2023-53245: NULL Pointer Dereference5.5 MediumN/A0%Sep 15, 2025
CVE-2023-53244: NULL Pointer Dereference5.5 MediumN/A0%Sep 15, 2025
CVE-2023-53243: Undefined Security Weakness5.5 MediumN/A0%Sep 15, 2025
CVE-2022-50315: Improper Validation of Array Index7.8 HighN/A0%Sep 15, 2025
CVE-2022-50314: Undefined Security Weakness5.5 MediumN/A0%Sep 15, 2025
CVE-2022-50313: Undefined Security Weakness5.5 MediumN/A0%Sep 15, 2025
CVE-2022-50312: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Sep 15, 2025
CVE-2022-50311: Undefined Security Weakness5.5 MediumN/A0%Sep 15, 2025
CVE-2022-50310: Use After Free7.8 HighN/A0%Sep 15, 2025
CVE-2022-50309: Undefined Security Weakness5.5 MediumN/A0%Sep 15, 2025
CVE-2022-50308: NULL Pointer Dereference5.5 MediumN/A0%Sep 15, 2025
CVE-2022-50307: Out-of-bounds Read7.1 HighN/A0%Sep 15, 2025
CVE-2022-50306: Out-of-bounds Read7.1 HighN/A0%Sep 15, 2025
CVE-2022-50305: Use After Free7.8 HighN/A0%Sep 15, 2025
CVE-2022-50304: Missing Release of Memory after Effective Lifetime5.5 MediumN/A0%Sep 15, 2025
CVE-2022-50302: Undefined Security Weakness7.5 HighN/A0%Sep 15, 2025
CVE-2022-50301: Out-of-bounds Write7.8 HighN/A0%Sep 15, 2025
CVE-2022-50300: Use After Free7.8 HighN/A0%Sep 15, 2025
CVE-2022-50299: Undefined Security Weakness5.5 MediumN/A0%Sep 15, 2025
86826-86850 of 673429
‹›