The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-90171: Linux: In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: release pending child sockets…N/AN/AN/ASep 17, 2026
CVE-2026-90170: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ipc response length before…N/AN/AN/ASep 17, 2026
CVE-2026-90169: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: free preauth sessions on connection teardown…N/AN/AN/ASep 17, 2026
CVE-2026-90168: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ASep 17, 2026
CVE-2026-90167: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize oplock close with pending break…N/AN/AN/ASep 17, 2026
CVE-2026-90166: Linux: In the Linux kernel, the following vulnerability has been resolved: smb/server: fix null-ptr-deref in…N/AN/AN/ASep 17, 2026
CVE-2026-90165: Linux: In the Linux kernel, the following vulnerability has been resolved: smb/server: fix invalid pointer dereference in…N/AN/AN/ASep 17, 2026
CVE-2026-90164: Linux: In the Linux kernel, the following vulnerability has been resolved: smb/server: abort initialization when proc setup…N/AN/AN/ASep 17, 2026
CVE-2026-90163: Linux: In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbd_proc_cleanup() on module…N/AN/AN/ASep 17, 2026
CVE-2026-90162: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer publishing granted locks to prevent…8.8 HighN/AN/ASep 17, 2026
CVE-2026-90161: Linux: In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced ztailpacking pclusters…7.1 HighN/AN/ASep 17, 2026
CVE-2026-90160: Linux: In the Linux kernel, the following vulnerability has been resolved: lwt_bpf: Restore reserved headroom after xmit…N/AN/AN/ASep 17, 2026
CVE-2026-90159: Linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX…N/AN/AN/ASep 17, 2026
CVE-2026-90158: Linux: In the Linux kernel, the following vulnerability has been resolved: m68k: nfcon: Do not call console_is_registered() in…N/AN/AN/ASep 17, 2026
CVE-2026-90157: Linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative optlen in cgroup getsockopt…N/AN/AN/ASep 17, 2026
CVE-2026-90156: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely discard unregistered deferred locks…N/AN/AN/ASep 17, 2026
CVE-2026-90155: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: detach blocked lock requests before freeing…N/AN/AN/ASep 17, 2026
CVE-2026-90154: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope session state changes to bound…N/AN/AN/ASep 17, 2026
CVE-2026-90153: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound smb_check_perm_dacl() ACE walks by…8.1 HighN/AN/ASep 17, 2026
CVE-2026-90152: Linux: In the Linux kernel, the following vulnerability has been resolved: smb/server: fix session leak in…N/AN/AN/ASep 17, 2026
CVE-2026-90151: Linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client…9.8 CriticalN/AN/ASep 17, 2026
CVE-2026-90150: Linux: In the Linux kernel, the following vulnerability has been resolved: pnfs/blocklayout: Fix device leaks on parse failure…N/AN/AN/ASep 17, 2026
CVE-2026-90149: Linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: fix NULL dereference for NFSv4.0…7.5 HighN/AN/ASep 17, 2026
CVE-2026-90148: Linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix incorrect argument passed to…N/AN/AN/ASep 17, 2026
CVE-2026-90147: Linux: In the Linux kernel, the following vulnerability has been resolved: clk: devres: fix cleanup in…N/AN/AN/ASep 17, 2026
1076-1100 of 520315
‹›