The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2025-58760: Relative Path Traversal8.6 HighN/A1%Sep 9, 2025
CVE-2025-58759: Improper Input Validation5.1 MediumN/A0%Sep 9, 2025
CVE-2025-58758: Improper Check or Handling of Exceptional Conditions5.1 MediumN/A0%Sep 9, 2025
CVE-2025-58753: Missing Authorization7.5 High5.3 Medium0%Sep 9, 2025
CVE-2025-58442: Observable Response Discrepancy5.3 MediumN/A0%Sep 9, 2025
CVE-2025-58435: Not Using Password AgingN/A4.1 Medium0%Sep 9, 2025
CVE-2025-58430: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 Medium8.6 High0%Sep 9, 2025
CVE-2025-58180: Improper Neutralization of Special Elements used in an OS Command8.8 High7.5 High21%Sep 9, 2025
CVE-2025-58063: Incorrect Conversion between Numeric Types7.1 HighN/A0%Sep 9, 2025
CVE-2025-55054: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 9, 2025
CVE-2025-55053: Use of Weak Hash6.5 MediumN/A0%Sep 9, 2025
CVE-2025-54257: Use After Free7.8 HighN/A0%Sep 9, 2025
CVE-2025-54255: Violation of Secure Design Principles4.0 MediumN/A0%Sep 9, 2025
CVE-2025-53914: Improper Privilege ManagementN/A7.0 High0%Sep 9, 2025
CVE-2025-53913: Improper Privilege ManagementN/A7.0 High0%Sep 9, 2025
CVE-2025-47415: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.8 Medium0%Sep 9, 2025
CVE-2025-44594: Server-Side Request Forgery (SSRF)9.1 CriticalN/A0%Sep 9, 2025
CVE-2025-43786: Improper Neutralization of Input During Web Page Generation5.3 Medium6.9 Medium0%Sep 9, 2025
CVE-2025-36125: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Sep 9, 2025
CVE-2025-36011: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute4.3 MediumN/A0%Sep 9, 2025
CVE-2025-34175: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium15%Sep 9, 2025
CVE-2025-34174: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium10%Sep 9, 2025
CVE-2025-34173: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium5.3 Medium1%Sep 9, 2025
CVE-2025-34172: Improper Neutralization of Input During Web Page Generation6.1 Medium4.8 Medium1%Sep 9, 2025
CVE-2025-57278: Improper Authentication8.8 HighN/A0%Sep 9, 2025
87126-87150 of 393406
‹›