The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-82462: Insufficient Verification of Data Authenticity6.5 Medium6.9 Medium0%Aug 29, 2026
CVE-2026-82461: Improper Verification of Cryptographic Signature8.1 High8.6 High0%Aug 29, 2026
CVE-2026-82460: Improper Limitation of a Pathname to a Restricted Directory9.8 Critical9.3 Critical1%Aug 29, 2026
CVE-2026-82481: Incorrect Behavior Order: Validate Before CanonicalizeN/A8.7 High1%Aug 29, 2026
CVE-2026-82477: Server-Side Request Forgery (SSRF)5.8 MediumN/A0%Aug 29, 2026
CVE-2026-82457: Incorrect Conversion between Numeric Types7.8 High8.5 High0%Aug 29, 2026
CVE-2026-82456: Binding to an Unrestricted IP Address10.0 Critical10.0 Critical1%Aug 29, 2026
CVE-2026-82455: Undefined Security WeaknessN/A6.9 Medium0%Aug 29, 2026
CVE-2026-82454: Improper Verification of Cryptographic Signature9.1 Critical9.3 Critical0%Aug 29, 2026
CVE-2026-82453: Plaintext Storage of a Password7.5 High8.7 High0%Aug 29, 2026
CVE-2026-82452: Missing Authentication for Critical Function9.8 Critical9.3 Critical0%Aug 29, 2026
CVE-2026-82451: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Aug 29, 2026
CVE-2026-82450: Unrestricted Upload of File with Dangerous Type8.8 High8.7 High1%Aug 29, 2026
CVE-2026-82449: Observable Timing Discrepancy5.3 Medium6.9 Medium0%Aug 29, 2026
CVE-2026-82448: Use of Hard-coded Credentials9.8 Critical9.3 Critical0%Aug 29, 2026
CVE-2026-82447: Improper Neutralization of Special Elements Used in a Template Engine8.8 High8.7 High0%Aug 29, 2026
CVE-2026-14494: Unrestricted Upload of File with Dangerous Type9.8 CriticalN/A1%Aug 29, 2026
CVE-2026-82364: Concurrent Execution using Shared Resource with Improper Synchronization4.2 Medium2.3 Low0%Aug 29, 2026
CVE-2026-80725: Undefined Security Weakness9.8 CriticalN/A0%Aug 29, 2026
CVE-2026-81346: Missing Authorization4.3 MediumN/A0%Aug 29, 2026
CVE-2026-81342: URL Redirection to Untrusted Site4.7 MediumN/A0%Aug 29, 2026
CVE-2026-81200: Authorization Bypass Through User-Controlled Key2.7 LowN/A0%Aug 29, 2026
CVE-2026-81026: Improper Access Control4.8 MediumN/A0%Aug 29, 2026
CVE-2026-80488: Improper Neutralization of Special Elements used in an SQL Command4.1 MediumN/A0%Aug 29, 2026
CVE-2026-80311: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Aug 29, 2026
11401-11425 of 691462
‹›