The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2023-20046: Authentication Bypass by Alternate Name8.8 HighN/A1%May 9, 2023
CVE-2023-27409: Improper Limitation of a Pathname to a Restricted Directory2.5 LowN/A0%May 9, 2023
CVE-2023-27408: Creation of Temporary File With Insecure Permissions3.3 LowN/A0%May 9, 2023
CVE-2023-29058: Incorrect Default Permissions6.4 MediumN/A0%Apr 28, 2023
CVE-2023-1778: Improper Authentication10.0 CriticalN/A1%Apr 27, 2023
CVE-2023-29011: Uncontrolled Search Path Element7.5 HighN/A0%Apr 25, 2023
CVE-2023-29007: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.0 HighN/A6%Apr 25, 2023
CVE-2023-25555: Improper Neutralization of Special Elements used in an OS Command5.6 MediumN/A1%Apr 18, 2023
CVE-2023-22948: Missing Encryption of Sensitive Data4.9 MediumN/A0%Apr 13, 2023
CVE-2023-29054: Inadequate Encryption Strength6.7 MediumN/A0%Apr 11, 2023
CVE-2023-24182: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A1%Apr 11, 2023
CVE-2023-28368: Use of Weak Credentials5.7 MediumN/A0%Apr 11, 2023
CVE-2023-23761: Improper Authentication7.7 HighN/A0%Apr 7, 2023
CVE-2023-0344: Undefined Security Weakness9.1 CriticalN/A1%Mar 31, 2023
CVE-2023-27538: Authentication Bypass by Primary Weakness5.5 MediumN/A1%Mar 30, 2023
CVE-2022-48428: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A68%Mar 27, 2023
CVE-2023-0494: Use After Free7.8 HighN/A1%Mar 27, 2023
CVE-2023-28436: Improper Privilege Management5.7 MediumN/A0%Mar 23, 2023
CVE-2023-27100: Improper Restriction of Excessive Authentication Attempts9.8 CriticalN/A10%Mar 22, 2023
CVE-2023-28531: Improper Access ControlN/AN/A2%Mar 17, 2023
CVE-2023-28110: Improper Neutralization of Special Elements used in a Command5.7 MediumN/A1%Mar 16, 2023
CVE-2023-28113: Improper Input Validation5.9 MediumN/A1%Mar 16, 2023
CVE-2023-25804: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Mar 15, 2023
CVE-2023-0345: Undefined Security Weakness9.8 CriticalN/A1%Mar 13, 2023
CVE-2023-27486: Incorrect Authorization8.1 HighN/A1%Mar 8, 2023
901-925 of 1969
‹›