The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2020-7931: Undefined Security Weakness8.8 HighN/A5%Jan 23, 2020
CVE-2019-17584: Undefined Security Weakness7.5 HighN/A1%Jan 21, 2020
CVE-2019-17361: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A15%Jan 17, 2020
CVE-2013-3619: Use of Hard-coded Credentials8.1 HighN/A10%Jan 2, 2020
CVE-2019-19141: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A5%Dec 19, 2019
CVE-2019-19234: Undefined Security Weakness7.5 HighN/A3%Dec 19, 2019
CVE-2019-16552: Incorrect Default Permissions5.4 MediumN/A1%Dec 17, 2019
CVE-2019-16551: Cross-Site Request Forgery (CSRF)8.8 HighN/A1%Dec 17, 2019
CVE-2019-19750: Use of Hard-coded Cryptographic Key9.8 CriticalN/A1%Dec 12, 2019
CVE-2019-14889: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A3%Dec 10, 2019
CVE-2019-19133: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A2%Dec 4, 2019
CVE-2016-1000104: Improper Input Validation8.8 HighN/A2%Dec 3, 2019
CVE-2019-15998: Improper Access Control5.3 MediumN/A1%Nov 26, 2019
CVE-2019-15288: Improper Input Validation8.8 HighN/A2%Nov 26, 2019
CVE-2019-18241: Inadequate Encryption Strength6.5 MediumN/A0%Nov 25, 2019
CVE-2019-16546: Authorization Bypass Through User-Controlled Key5.9 MediumN/A1%Nov 21, 2019
CVE-2014-0083: Use of Password Hash With Insufficient Computational Effort5.5 MediumN/A0%Nov 21, 2019
CVE-2011-2916: Cleartext Storage of Sensitive Information5.5 MediumN/A0%Nov 15, 2019
CVE-2019-15799: Improper Privilege Management8.8 HighN/A2%Nov 14, 2019
CVE-2019-15804: Undefined Security Weakness7.5 HighN/A1%Nov 14, 2019
CVE-2019-18849: Out-of-bounds Read5.5 MediumN/A1%Nov 11, 2019
CVE-2019-18465: Missing Authentication for Critical Function9.8 CriticalN/A1%Oct 31, 2019
CVE-2019-14926: Use of Hard-coded Credentials9.8 CriticalN/A2%Oct 28, 2019
CVE-2019-10472: Incorrect Default Permissions6.5 MediumN/A1%Oct 23, 2019
CVE-2019-10471: Cross-Site Request Forgery (CSRF)8.8 HighN/A1%Oct 23, 2019
1251-1275 of 1970
‹›