The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2022-36560: Use of Hard-coded Credentials9.8 CriticalN/A1%Aug 29, 2022
CVE-2022-36633: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A50%Aug 24, 2022
CVE-2021-3975: Use After Free6.5 MediumN/A2%Aug 23, 2022
CVE-2022-24950: Concurrent Execution using Shared Resource with Improper Synchronization7.5 HighN/A1%Aug 16, 2022
CVE-2022-38133: Insertion of Sensitive Information into Log File3.2 LowN/A0%Aug 10, 2022
CVE-2022-29154: Improper Input Validation7.4 HighN/A2%Aug 2, 2022
CVE-2022-36909: Missing Authorization6.5 MediumN/A1%Jul 27, 2022
CVE-2022-36908: Cross-Site Request Forgery (CSRF)6.5 MediumN/A1%Jul 27, 2022
CVE-2022-36881: Improper Certificate Validation8.1 HighN/A1%Jul 27, 2022
CVE-2022-30269: Insufficient Verification of Data Authenticity8.8 HighN/A0%Jul 26, 2022
CVE-2022-30270: Improper Authentication9.8 CriticalN/A1%Jul 26, 2022
CVE-2022-30271: Use of Hard-coded Credentials9.8 CriticalN/A1%Jul 26, 2022
CVE-2022-30272: Insufficient Verification of Data Authenticity7.2 HighN/A0%Jul 26, 2022
CVE-2022-29964: Use of Hard-coded Credentials5.5 MediumN/A0%Jul 26, 2022
CVE-2022-24657: Use of Hard-coded Credentials9.8 CriticalN/A1%Jul 20, 2022
CVE-2022-36321: Insertion of Sensitive Information into Log File4.1 MediumN/A2%Jul 20, 2022
CVE-2022-32985: Use of Hard-coded Credentials9.8 CriticalN/A1%Jul 17, 2022
CVE-2022-28369: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Jul 14, 2022
CVE-2022-34757: Use of a Broken or Risky Cryptographic Algorithm6.7 MediumN/A0%Jul 13, 2022
CVE-2022-32073: Integer Overflow or Wraparound9.8 CriticalN/A2%Jul 13, 2022
CVE-2022-34464: Files or Directories Accessible to External Parties6.3 Medium5.3 Medium0%Jul 12, 2022
CVE-2022-31124: Generation of Error Message Containing Sensitive Information7.7 HighN/A1%Jul 6, 2022
CVE-2022-31110: Uncontrolled Resource Consumption5.3 MediumN/A2%Jun 29, 2022
CVE-2022-28622: Use of a Broken or Risky Cryptographic Algorithm7.5 HighN/A1%Jun 27, 2022
CVE-2022-1668: Weak Password Requirements9.8 CriticalN/A2%Jun 24, 2022
976-1000 of 1969
‹›