The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2016-2183: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A96%Sep 1, 2016
CVE-2016-5333: Use of Hard-coded Credentials9.8 CriticalN/A3%Aug 31, 2016
CVE-2016-6515: Improper Input Validation7.5 HighN/A59%Aug 7, 2016
CVE-2016-1426: Undefined Security Weakness7.5 HighN/A2%Jul 15, 2016
CVE-2015-6289: Undefined Security Weakness7.5 HighN/A4%Jun 23, 2016
CVE-2016-2362: Undefined Security Weakness9.8 CriticalN/A2%Jun 20, 2016
CVE-2016-3959: Improper Input Validation7.5 HighN/A4%May 23, 2016
CVE-2016-2353: Undefined Security Weakness7.8 HighN/A0%May 7, 2016
CVE-2016-4422: Improper Authentication9.8 CriticalN/A2%May 6, 2016
CVE-2015-8325: Undefined Security Weakness7.8 HighN/A1%May 1, 2016
CVE-2016-0787: Exposure of Sensitive Information to an Unauthorized Actor5.9 MediumN/A3%Apr 13, 2016
CVE-2015-3146: Undefined Security Weakness7.5 HighN/A4%Apr 13, 2016
CVE-2016-0739: Exposure of Sensitive Information to an Unauthorized Actor5.9 MediumN/A2%Apr 13, 2016
CVE-2016-3654: Improper Input Validation7.2 HighN/A3%Apr 12, 2016
CVE-2016-1235: Undefined Security Weakness8.8 HighN/A3%Apr 11, 2016
CVE-2016-1313: Undefined Security Weakness9.8 CriticalN/A3%Apr 6, 2016
CVE-2016-3115: Improper Neutralization of CRLF Sequences6.4 MediumN/A37%Mar 22, 2016
CVE-2016-3116: Undefined Security Weakness6.4 MediumN/A19%Mar 22, 2016
CVE-2016-1329: Improper Authentication9.8 CriticalN/A4%Mar 3, 2016
CVE-2016-1335: Undefined Security Weakness7.5 HighN/A3%Feb 19, 2016
CVE-2015-2008: Improper Access Control4.4 MediumN/A1%Feb 15, 2016
CVE-2015-5012: Undefined Security Weakness7.5 HighN/A2%Feb 15, 2016
CVE-2016-2230: Undefined Security Weakness9.8 CriticalN/A4%Feb 8, 2016
CVE-2015-8362: Undefined Security Weakness9.8 CriticalN/A5%Jan 22, 2016
CVE-2016-1984: Undefined Security Weakness9.8 CriticalN/A4%Jan 22, 2016
1526-1550 of 1974
‹›