The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-78228: Uncontrolled RecursionN/A5.9 Medium0%Aug 30, 2026
CVE-2026-78038: Improperly Controlled Modification of Dynamically-Determined Object AttributesN/A5.9 Medium0%Aug 30, 2026
CVE-2026-77454: Incorrect AuthorizationN/A5.9 Medium0%Aug 30, 2026
CVE-2026-82539: Improper Restriction of Operations within the Bounds of a Memory Buffer9.1 Critical8.5 High1%Aug 30, 2026
CVE-2026-82488: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Aug 30, 2026
CVE-2026-82487: Weak Password Recovery Mechanism for Forgotten Password6.3 Medium2.1 Low0%Aug 30, 2026
CVE-2026-82486: Improper Access Control5.0 Medium2.3 Low0%Aug 30, 2026
CVE-2026-82485: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 30, 2026
CVE-2026-82484: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 30, 2026
CVE-2026-82483: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Aug 30, 2026
CVE-2026-82482: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Aug 30, 2026
CVE-2026-81766: Improper Privilege Management6.6 MediumN/A0%Aug 30, 2026
CVE-2026-81660: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Aug 30, 2026
CVE-2026-78364: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Aug 30, 2026
CVE-2026-76585: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Aug 30, 2026
CVE-2026-19722: Improper Limitation of a Pathname to a Restricted Directory6.6 MediumN/A0%Aug 30, 2026
CVE-2026-14835: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Aug 30, 2026
CVE-2026-14307: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Aug 30, 2026
CVE-2026-82480: Integer Underflow (Wrap or Wraparound)7.4 High5.3 Medium0%Aug 30, 2026
CVE-2026-82479: Buffer Copy without Checking Size of Input6.3 Medium5.3 Medium0%Aug 30, 2026
CVE-2026-82478: Stack-based Buffer Overflow7.3 High6.9 Medium0%Aug 30, 2026
CVE-2026-15980: Authentication Bypass by Alternate Name9.8 CriticalN/A0%Aug 30, 2026
CVE-2026-77846: Improper Neutralization of Special Elements in Data Query LogicN/A2.1 Low0%Aug 30, 2026
CVE-2026-75759: Improper Verification of Cryptographic SignatureN/A7.6 High0%Aug 30, 2026
CVE-2026-82562: Allocation of Resources Without Limits or Throttling3.7 Low6.3 Medium0%Aug 30, 2026
11351-11375 of 691462
‹›