The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2021-29506: Uncontrolled Resource Consumption6.5 MediumN/A1%May 13, 2021
CVE-2021-21550: Improper Neutralization of Special Elements used in an OS Command6.0 MediumN/A0%May 6, 2021
CVE-2021-21527: Improper Neutralization of Special Elements used in an OS Command6.0 MediumN/A0%May 6, 2021
CVE-2021-31800: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A19%May 5, 2021
CVE-2020-21995: Use of Hard-coded Credentials9.8 CriticalN/A2%Apr 29, 2021
CVE-2021-20989: Improper Certificate Validation5.9 MediumN/A2%Apr 19, 2021
CVE-2021-28123: Initialization of a Resource with an Insecure Default9.8 CriticalN/A1%Apr 2, 2021
CVE-2021-27245: Protection Mechanism Failure8.1 HighN/A3%Mar 29, 2021
CVE-2020-28695: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A2%Mar 26, 2021
CVE-2021-3027: Improper Neutralization of Special Elements in Output Used by a Downstream Component6.5 MediumN/A1%Mar 26, 2021
CVE-2021-27450: Inadequate Encryption Strength7.8 HighN/A0%Mar 25, 2021
CVE-2017-20002: Improper Privilege Management7.8 HighN/A0%Mar 17, 2021
CVE-2021-25676: Improper Restriction of Excessive Authentication Attempts7.5 HighN/A1%Mar 15, 2021
CVE-2021-27892: Undefined Security Weakness7.8 HighN/A0%Mar 15, 2021
CVE-2021-27891: Undefined Security Weakness8.8 HighN/A1%Mar 15, 2021
CVE-2021-27893: Undefined Security Weakness7.0 HighN/A0%Mar 15, 2021
CVE-2021-28041: Double Free7.1 HighN/A3%Mar 5, 2021
CVE-2020-15938: Undefined Security Weakness4.0 MediumN/A1%Mar 4, 2021
CVE-2021-3197: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.8 CriticalN/A72%Feb 27, 2021
CVE-2020-12878: Improper Link Resolution Before File Access7.8 HighN/A1%Feb 17, 2021
CVE-2021-1378: Uncontrolled Resource Consumption5.3 MediumN/A2%Feb 17, 2021
CVE-2021-25299: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A98%Feb 15, 2021
CVE-2021-21502: Improper Authentication9.8 CriticalN/A1%Feb 9, 2021
CVE-2020-26194: Incorrect Permission Assignment for Critical Resource7.0 HighN/A0%Feb 9, 2021
CVE-2020-26192: Missing Authentication for Critical Function7.8 HighN/A0%Feb 9, 2021
1126-1150 of 1969
‹›