The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2025-50979: Improper Neutralization of Special Elements used in an SQL Command8.6 HighN/A9%Aug 27, 2025
CVE-2025-58216: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Aug 27, 2025
CVE-2025-58213: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 27, 2025
CVE-2025-58212: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 27, 2025
CVE-2025-58211: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 27, 2025
CVE-2025-58209: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 27, 2025
CVE-2025-58208: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 27, 2025
CVE-2025-58205: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 27, 2025
CVE-2025-58204: URL Redirection to Untrusted Site4.7 MediumN/A0%Aug 27, 2025
CVE-2025-58203: Server-Side Request Forgery (SSRF)4.4 MediumN/A0%Aug 27, 2025
CVE-2025-58202: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Aug 27, 2025
CVE-2025-58201: Missing Authorization5.3 MediumN/A0%Aug 27, 2025
CVE-2025-58198: Missing Authorization6.5 MediumN/A0%Aug 27, 2025
CVE-2025-58197: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 27, 2025
CVE-2025-58195: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 27, 2025
CVE-2025-58194: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Aug 27, 2025
CVE-2025-58193: Missing Authorization4.3 MediumN/A0%Aug 27, 2025
CVE-2025-58192: Missing Authorization4.3 MediumN/A0%Aug 27, 2025
CVE-2025-5187: Incorrect Authorization6.7 MediumN/A1%Aug 27, 2025
CVE-2025-57821: URL Redirection to Untrusted Site4.2 MediumN/A0%Aug 27, 2025
CVE-2025-50977: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 27, 2025
CVE-2025-50428: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A2%Aug 27, 2025
CVE-2025-34161: Improper Neutralization of Special Elements used in an OS Command8.8 High9.4 Critical3%Aug 27, 2025
CVE-2025-34159: Improper Control of Generation of Code8.8 High9.4 Critical1%Aug 27, 2025
CVE-2025-34157: Improper Neutralization of Input During Web Page Generation9.0 Critical9.4 Critical0%Aug 27, 2025
88851-88875 of 691462
‹›