The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-56713: Undefined Security WeaknessN/AN/AN/AAug 30, 2026
CVE-2026-82556: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Aug 30, 2026
CVE-2026-82555: Use of Insufficiently Random Values3.7 Low2.9 Low0%Aug 30, 2026
CVE-2026-82554: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Aug 30, 2026
CVE-2026-81322: Exposure of Sensitive Information to an Unauthorized ActorN/A2.1 Low0%Aug 30, 2026
CVE-2026-81319: Deserialization of Untrusted DataN/A5.9 Medium0%Aug 30, 2026
CVE-2026-82553: Improper Authorization6.3 Medium2.1 Low0%Aug 30, 2026
CVE-2026-82552: Improper Resource Shutdown or Release4.3 Medium2.1 Low0%Aug 30, 2026
CVE-2026-82551: Undefined Security Weakness5.3 Medium5.5 Medium0%Aug 30, 2026
CVE-2026-82550: Improper Input Validation5.3 Medium5.5 Medium0%Aug 30, 2026
CVE-2026-82549: Improper Validation of Integrity Check Value8.3 High5.5 Medium0%Aug 30, 2026
CVE-2026-78699: Unchecked Return ValueN/A7.2 High0%Aug 30, 2026
CVE-2026-82658: Improper Authorization4.3 Medium5.3 Medium0%Aug 30, 2026
CVE-2026-82657: Exposure of Sensitive Information to an Unauthorized Actor7.5 High8.7 High0%Aug 30, 2026
CVE-2026-82656: Improper Limitation of a Pathname to a Restricted Directory2.6 Low2.1 Low0%Aug 30, 2026
CVE-2026-82655: Improper Neutralization of Special Elements used in an SQL Command7.5 High8.7 High0%Aug 30, 2026
CVE-2026-82654: Improper Neutralization of Input During Web Page Generation8.9 High9.3 Critical0%Aug 30, 2026
CVE-2026-82653: Improper Neutralization of Input During Web Page Generation8.9 High9.3 Critical0%Aug 30, 2026
CVE-2026-82652: Exposure of Resource to Wrong Sphere5.3 Medium6.9 Medium0%Aug 30, 2026
CVE-2026-82651: Exposure of Sensitive Information to an Unauthorized Actor4.9 Medium6.9 Medium0%Aug 30, 2026
CVE-2026-82650: Exposure of Resource to Wrong Sphere4.4 Medium5.9 Medium0%Aug 30, 2026
CVE-2026-82649: Uncontrolled Search Path ElementN/A7.0 High0%Aug 30, 2026
CVE-2026-82648: Improper Input Validation7.1 High7.1 High0%Aug 30, 2026
CVE-2026-82647: Cross-Site Request Forgery (CSRF)6.1 Medium5.3 Medium0%Aug 30, 2026
CVE-2026-82646: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Aug 30, 2026
11301-11325 of 691462
‹›