The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2017-20083: Hidden Functionality5.3 MediumN/A0%Jun 22, 2022
CVE-2022-32974: Undefined Security Weakness6.5 MediumN/A1%Jun 21, 2022
CVE-2022-27511: Improper Access Control8.1 HighN/A12%Jun 16, 2022
CVE-2022-29241: Exposure of Sensitive Information to an Unauthorized Actor7.1 HighN/A1%Jun 14, 2022
CVE-2022-29238: Direct Request4.3 MediumN/A1%Jun 14, 2022
CVE-2022-28704: Undefined Security Weakness7.2 HighN/A3%Jun 13, 2022
CVE-2022-29620: Cleartext Storage of Sensitive Information6.5 MediumN/A2%Jun 7, 2022
CVE-2022-27782: Improper Certificate Validation7.5 HighN/A3%Jun 2, 2022
CVE-2021-32546: Undefined Security Weakness8.8 HighN/A2%May 31, 2022
CVE-2022-29245: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)6.5 MediumN/A1%May 31, 2022
CVE-2022-29186: Use of Hard-coded Cryptographic Key9.1 CriticalN/A1%May 20, 2022
CVE-2022-30959: Missing Authorization6.5 MediumN/A1%May 17, 2022
CVE-2022-30958: Cross-Site Request Forgery (CSRF)8.8 HighN/A1%May 17, 2022
CVE-2022-30957: Missing Authorization4.3 MediumN/A1%May 17, 2022
CVE-2022-28161: Insertion of Sensitive Information into Log File5.5 MediumN/A0%May 9, 2022
CVE-2022-27224: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A5%May 9, 2022
CVE-2022-30333: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A99%May 9, 2022
CVE-2021-34601: Use of Hard-coded Password9.8 CriticalN/A1%Apr 27, 2022
CVE-2022-29810: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Apr 27, 2022
CVE-2022-20773: Use of Hard-coded Cryptographic Key7.5 HighN/A1%Apr 21, 2022
CVE-2022-1039: Weak Password Requirements9.6 CriticalN/A1%Apr 20, 2022
CVE-2022-20692: Uncontrolled Resource Consumption7.7 HighN/A1%Apr 15, 2022
CVE-2022-24411: Creation of Temporary File With Insecure Permissions7.8 HighN/A0%Apr 12, 2022
CVE-2022-23159: Missing Release of Memory after Effective Lifetime4.8 MediumN/A1%Apr 12, 2022
CVE-2022-25569: Use of Hard-coded Credentials9.8 CriticalN/A1%Apr 4, 2022
1001-1025 of 1969
‹›