The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-82609: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 31, 2026
CVE-2026-82722: Allocation of Resources Without Limits or ThrottlingN/A8.3 High0%Aug 31, 2026
CVE-2026-82681: Improper Encoding or Escaping of OutputN/A2.0 Low0%Aug 31, 2026
CVE-2026-82673: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.3 High1%Aug 31, 2026
CVE-2026-82608: Out-of-bounds Read7.4 High2.1 Low0%Aug 31, 2026
CVE-2026-82607: Unrestricted Upload of File with Dangerous Type7.3 High5.5 Medium0%Aug 31, 2026
CVE-2026-82605: Loop with Unreachable Exit Condition4.3 Medium5.3 Medium0%Aug 31, 2026
CVE-2026-81853: Authorization Bypass Through User-Controlled KeyN/A2.3 Low0%Aug 31, 2026
CVE-2026-81852: Use of Insufficiently Random ValuesN/A2.1 Low0%Aug 31, 2026
CVE-2026-77850: Improper Neutralization of Input During Web Page GenerationN/A8.4 High0%Aug 31, 2026
CVE-2026-75757: Reliance on Cookies without Validation and Integrity CheckingN/A8.3 High0%Aug 31, 2026
CVE-2026-82604: Uncontrolled Recursion4.3 Medium5.3 Medium0%Aug 31, 2026
CVE-2026-82603: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium2.1 Low0%Aug 31, 2026
CVE-2026-82602: Authorization Bypass Through User-Controlled Key5.3 Medium5.5 Medium0%Aug 31, 2026
CVE-2026-82601: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Aug 31, 2026
CVE-2026-82600: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 31, 2026
CVE-2026-82580: Generation of Error Message Containing Sensitive InformationN/A5.3 Medium0%Aug 31, 2026
CVE-2026-82579: Loop with Unreachable Exit ConditionN/A6.0 Medium0%Aug 31, 2026
CVE-2026-82564: Authorization Bypass Through User-Controlled KeyN/A7.1 High0%Aug 31, 2026
CVE-2026-75760: Generation of Error Message Containing Sensitive InformationN/A7.1 High0%Aug 31, 2026
CVE-2026-82599: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium2.1 Low0%Aug 31, 2026
CVE-2026-82598: Improper Control of Generation of Code7.3 High5.5 Medium0%Aug 31, 2026
CVE-2026-82597: Improper Neutralization of Special Elements used in a Command7.4 High2.1 Low1%Aug 31, 2026
CVE-2026-81315: Origin Validation ErrorN/A7.4 High0%Aug 31, 2026
CVE-2026-77956: Improper Control of Generation of CodeN/A8.9 High0%Aug 31, 2026
11026-11050 of 567647
‹›