The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2017-16652: URL Redirection to Untrusted Site6.1 MediumN/A1%Jun 13, 2018
CVE-2017-7828: Use After Free9.8 CriticalN/A7%Jun 11, 2018
CVE-2011-4190: Missing Authentication for Critical Function5.9 MediumN/A1%Jun 8, 2018
CVE-2017-16202: Embedded Malicious Code7.5 HighN/A1%Jun 7, 2018
CVE-2017-16203: Embedded Malicious Code7.5 HighN/A1%Jun 7, 2018
CVE-2017-16204: Embedded Malicious Code7.5 HighN/A1%Jun 7, 2018
CVE-2017-16205: Embedded Malicious Code7.5 HighN/A1%Jun 7, 2018
CVE-2017-16206: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A1%Jun 7, 2018
CVE-2018-3737: Allocation of Resources Without Limits or Throttling7.5 HighN/A2%Jun 7, 2018
CVE-2018-11487: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%May 26, 2018
CVE-2016-9335: Use of Hard-coded Cryptographic Key10.0 CriticalN/A2%May 9, 2018
CVE-2013-2233: Undefined Security Weakness7.4 HighN/A2%May 4, 2018
CVE-2018-0226: Undefined Security Weakness7.5 HighN/A2%May 2, 2018
CVE-2018-8115: Improper Input Validation8.6 HighN/A35%May 2, 2018
CVE-2018-10575: Use of Hard-coded Credentials9.8 CriticalN/A9%Apr 30, 2018
CVE-2014-8421: Undefined Security Weakness7.5 HighN/A2%Apr 12, 2018
CVE-2014-9563: Improper Neutralization of CRLF Sequences4.9 MediumN/A1%Apr 12, 2018
CVE-2018-10024: Insufficiently Protected Credentials9.8 CriticalN/A1%Apr 11, 2018
CVE-2017-14459: Improper Neutralization of Special Elements used in an OS Command10.0 CriticalN/A13%Apr 11, 2018
CVE-2017-0932: Improper Privilege Management8.8 HighN/A1%Mar 22, 2018
CVE-2018-7750: Improper Authentication9.8 CriticalN/A27%Mar 13, 2018
CVE-2018-7749: Improper Authentication9.8 CriticalN/A2%Mar 12, 2018
CVE-2018-7236: Improper Authentication8.1 HighN/A1%Mar 9, 2018
CVE-2018-0141: Use of Hard-coded Credentials8.4 HighN/A0%Mar 8, 2018
CVE-2018-5314: Improper Authentication7.5 HighN/A3%Mar 1, 2018
1401-1425 of 1970
‹›