The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-90149: Linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: fix NULL dereference for NFSv4.0…N/AN/AN/ASep 17, 2026
CVE-2026-90148: Linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix incorrect argument passed to…N/AN/AN/ASep 17, 2026
CVE-2026-90147: Linux: In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in…N/AN/AN/ASep 17, 2026
CVE-2026-90146: Linux: In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into dev_xdp_install()…N/AN/AN/ASep 17, 2026
CVE-2026-90145: Linux: In the Linux kernel, the following vulnerability has been resolved: hinic3: Fix skb linearization mismatch and drop skb…N/AN/AN/ASep 17, 2026
CVE-2026-90144: Linux: In the Linux kernel, the following vulnerability has been resolved: dpll: fix NULL deref in dpll_device_ops() during…N/AN/AN/ASep 17, 2026
CVE-2026-90143: Linux: In the Linux kernel, the following vulnerability has been resolved: net: kcm: Hold RCU read lock while running BPF…N/AN/AN/ASep 17, 2026
CVE-2026-90142: Linux: In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix resize of the RX ring When a AF_XDP…N/AN/AN/ASep 17, 2026
CVE-2026-90141: Linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper…N/AN/AN/ASep 17, 2026
CVE-2026-90140: Linux: In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit…N/AN/AN/ASep 17, 2026
CVE-2026-90139: Linux: In the Linux kernel, the following vulnerability has been resolved: fuse: check for NULL root inode in…N/AN/AN/ASep 17, 2026
CVE-2026-90138: Linux: In the Linux kernel, the following vulnerability has been resolved: vsock: don't check the listener's sk_err in…N/AN/AN/ASep 17, 2026
CVE-2026-90137: Linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix password encoding…N/AN/AN/ASep 17, 2026
CVE-2026-90136: Linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Reject negative power cap…N/AN/AN/ASep 17, 2026
CVE-2026-90135: Linux: In the Linux kernel, the following vulnerability has been resolved: net: add missing ref_tracker_dir_exit() to…N/AN/AN/ASep 17, 2026
CVE-2026-90134: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local_page() usage in compress…N/AN/AN/ASep 17, 2026
CVE-2026-90133: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix index_root heap OOB write in…N/AN/AN/ASep 17, 2026
CVE-2026-90132: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX*…N/AN/AN/ASep 17, 2026
CVE-2026-90131: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize resident iomap reads with mrec_lock…N/AN/AN/ASep 17, 2026
CVE-2026-90130: Linux: In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: fix cleanup after worker creation failure…N/AN/AN/ASep 17, 2026
CVE-2026-90129: Linux: In the Linux kernel, the following vulnerability has been resolved: virtio_balloon: quiesce balloon work before device…N/AN/AN/ASep 17, 2026
CVE-2026-90128: Linux: In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: fix wrong list iterated in…N/AN/AN/ASep 17, 2026
CVE-2026-90127: Linux: In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: time out alarm requests RTC class…N/AN/AN/ASep 17, 2026
CVE-2026-90126: Linux: In the Linux kernel, the following vulnerability has been resolved: rtc: pcf8563: fix clock provider leak on unbind…N/AN/AN/ASep 17, 2026
CVE-2026-90125: Linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix request buffer leak in…N/AN/AN/ASep 17, 2026
976-1000 of 520315
‹›