The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-88402: n/a: A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database…N/AN/AN/ASep 21, 2026
CVE-2026-79919: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise6.3 MediumN/AN/ASep 21, 2026
CVE-2026-79918: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise6.3 MediumN/AN/ASep 21, 2026
CVE-2026-79917: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise6.5 MediumN/AN/ASep 21, 2026
CVE-2026-79916: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise9.1 CriticalN/AN/ASep 21, 2026
CVE-2026-79317: n/a: A session invalidation flaw exists in x-ui 0.3.2N/AN/AN/ASep 21, 2026
CVE-2026-79316: n/a: An improper access control vulnerability exists in x-ui 0.3.2N/AN/AN/ASep 21, 2026
CVE-2026-77525: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise4.2 MediumN/AN/ASep 21, 2026
CVE-2026-77523: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise7.4 HighN/AN/ASep 21, 2026
CVE-2026-77522: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise4.3 MediumN/AN/ASep 21, 2026
CVE-2026-77521: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise10.0 CriticalN/AN/ASep 21, 2026
CVE-2026-77520: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise5.4 MediumN/AN/ASep 21, 2026
CVE-2026-77519: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise5.4 MediumN/AN/ASep 21, 2026
CVE-2026-77518: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise5.0 MediumN/AN/ASep 21, 2026
CVE-2026-77517: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise5.4 MediumN/AN/ASep 21, 2026
CVE-2026-77516: 1Panel-dev MaxKB: MaxKB is an open-source AI assistant for enterprise5.4 MediumN/AN/ASep 21, 2026
CVE-2026-73553: envoyproxy envoy: Envoy is an open source edge and service proxy designed for cloud-native applications7.5 HighN/AN/ASep 21, 2026
CVE-2026-73551: envoyproxy envoy: Envoy is an open source edge and service proxy designed for cloud-native applications5.3 MediumN/AN/ASep 21, 2026
CVE-2026-73511: envoyproxy envoy: Envoy is an open source edge and service proxy designed for cloud-native applications5.3 MediumN/AN/ASep 21, 2026
CVE-2026-67827: n/a: Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote attackers to achieve Remote…N/AN/AN/ASep 21, 2026
CVE-2026-61647: roomi-fields notebooklm-mcp: NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content…N/A7.1 HighN/ASep 21, 2026
CVE-2026-59816: laurent22 joplin: Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks4.3 MediumN/AN/ASep 21, 2026
CVE-2026-58272: Sync-in server: Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing5.3 MediumN/AN/ASep 21, 2026
CVE-2026-58270: Sync-in server: Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing6.5 MediumN/AN/ASep 21, 2026
CVE-2026-55179: laurent22 joplin: Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks6.5 MediumN/AN/ASep 21, 2026
101-125 of 788572
‹›