The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-82726: Permissive Regular ExpressionN/A6.3 Medium0%Aug 31, 2026
CVE-2026-82725: Authorization Bypass Through User-Controlled KeyN/A2.3 Low0%Aug 31, 2026
CVE-2026-82724: Incorrect AuthorizationN/A7.6 High0%Aug 31, 2026
CVE-2026-82613: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 31, 2026
CVE-2026-82612: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 31, 2026
CVE-2026-82611: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 31, 2026
CVE-2026-82610: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 31, 2026
CVE-2026-82609: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 31, 2026
CVE-2026-82722: Allocation of Resources Without Limits or ThrottlingN/A8.3 High0%Aug 31, 2026
CVE-2026-82681: Improper Encoding or Escaping of OutputN/A2.0 Low0%Aug 31, 2026
CVE-2026-82673: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.3 High1%Aug 31, 2026
CVE-2026-82608: Out-of-bounds Read7.4 High2.1 Low0%Aug 31, 2026
CVE-2026-82607: Unrestricted Upload of File with Dangerous Type7.3 High5.5 Medium0%Aug 31, 2026
CVE-2026-82605: Loop with Unreachable Exit Condition4.3 Medium5.3 Medium0%Aug 31, 2026
CVE-2026-81853: Authorization Bypass Through User-Controlled KeyN/A2.3 Low0%Aug 31, 2026
CVE-2026-81852: Use of Insufficiently Random ValuesN/A2.1 Low0%Aug 31, 2026
CVE-2026-77850: Improper Neutralization of Input During Web Page GenerationN/A8.4 High0%Aug 31, 2026
CVE-2026-75757: Reliance on Cookies without Validation and Integrity CheckingN/A8.3 High0%Aug 31, 2026
CVE-2026-82604: Uncontrolled Recursion4.3 Medium5.3 Medium0%Aug 31, 2026
CVE-2026-82603: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium2.1 Low0%Aug 31, 2026
CVE-2026-82602: Authorization Bypass Through User-Controlled Key5.3 Medium5.5 Medium0%Aug 31, 2026
CVE-2026-82601: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Aug 31, 2026
CVE-2026-82600: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 31, 2026
CVE-2026-82580: Generation of Error Message Containing Sensitive InformationN/A5.3 Medium0%Aug 31, 2026
CVE-2026-82579: Loop with Unreachable Exit ConditionN/A6.0 Medium0%Aug 31, 2026
11076-11100 of 567647
‹›