The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-53546: Authorization Bypass Through User-Controlled Key9.6 CriticalN/A0%Aug 19, 2026
CVE-2026-53545: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Aug 19, 2026
CVE-2026-53542: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 19, 2026
CVE-2026-20177: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Aug 19, 2026
CVE-2026-49255: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 19, 2026
CVE-2026-49253: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A0%Aug 19, 2026
CVE-2026-48711: Improper Neutralization of Argument Delimiters in a Command7.0 HighN/A0%Aug 19, 2026
CVE-2026-47187: Improper Link Resolution Before File Access9.3 CriticalN/A0%Aug 19, 2026
CVE-2026-76221: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.8 High8.7 High0%Aug 19, 2026
CVE-2026-53456: Insufficiently Protected CredentialsN/A5.6 Medium0%Aug 18, 2026
CVE-2026-65959: Missing Authorization5.3 MediumN/A0%Aug 18, 2026
CVE-2026-24185: Authentication Bypass Using an Alternate Path or Channel7.1 HighN/A0%Aug 18, 2026
CVE-2026-61574: Authorization Bypass Through User-Controlled Key8.8 HighN/A0%Aug 18, 2026
CVE-2026-75913: External Control of File Name or Path9.3 Critical8.5 High0%Aug 18, 2026
CVE-2026-75912: Improper Neutralization of Argument Delimiters in a Command7.4 High8.3 High0%Aug 18, 2026
CVE-2026-75857: Improper Privilege Management7.0 High7.3 High0%Aug 18, 2026
CVE-2026-48798: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A0%Aug 18, 2026
CVE-2026-75627: Authentication Bypass Using an Alternate Path or Channel9.8 Critical9.3 Critical1%Aug 18, 2026
CVE-2026-74523: Undefined Security Weakness7.5 HighN/A1%Aug 15, 2026
CVE-2026-73678: Improper Control of Generation of Code10.0 Critical10.0 Critical1%Aug 14, 2026
CVE-2026-73664: Improper Privilege ManagementN/A8.6 High1%Aug 13, 2026
CVE-2026-73489: Improper Validation of Array Index4.3 MediumN/A0%Aug 13, 2026
CVE-2026-72841: External Control of File Name or Path9.9 Critical9.4 Critical1%Aug 13, 2026
CVE-2026-19750: Use of Hard-coded Password8.1 High8.2 High0%Aug 13, 2026
CVE-2026-49864: Improper Neutralization of Input During Web Page GenerationN/A8.6 High0%Aug 13, 2026
76-100 of 1969
‹›