The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-60754: Improper Access Control9.1 CriticalN/A0%Aug 18, 2026
CVE-2026-60753: Improper Access Control7.8 HighN/A0%Aug 18, 2026
CVE-2026-60752: Improper Access Control7.1 HighN/A0%Aug 18, 2026
CVE-2026-60751: Missing Authentication for Critical Function8.8 HighN/A0%Aug 18, 2026
CVE-2026-60748: Improper Access Control7.6 HighN/A0%Aug 18, 2026
CVE-2026-60742: Improper Access Control8.1 HighN/A0%Aug 18, 2026
CVE-2026-60737: Improper Access Control9.1 CriticalN/A0%Aug 18, 2026
CVE-2026-60733: Improper Access Control7.7 HighN/A0%Aug 18, 2026
CVE-2026-60731: Missing Authentication for Critical Function8.8 HighN/A0%Aug 18, 2026
CVE-2026-60730: Improper Access Control9.9 CriticalN/A0%Aug 18, 2026
CVE-2026-60729: Improper Access Control8.8 HighN/A0%Aug 18, 2026
CVE-2026-60728: Improper Access Control9.1 CriticalN/A1%Aug 18, 2026
CVE-2026-60727: Improper Access Control9.8 CriticalN/A0%Aug 18, 2026
CVE-2026-60722: Missing Authentication for Critical Function8.8 HighN/A0%Aug 18, 2026
CVE-2026-60721: Missing Authentication for Critical Function9.8 CriticalN/A0%Aug 18, 2026
CVE-2026-60720: Missing Authentication for Critical Function9.9 CriticalN/A0%Aug 18, 2026
CVE-2026-60716: Missing Authentication for Critical Function8.8 HighN/A0%Aug 18, 2026
CVE-2026-60715: Improper Access Control8.8 HighN/A0%Aug 18, 2026
CVE-2026-60707: Improper Access Control8.7 HighN/A0%Aug 18, 2026
CVE-2026-60699: Improper Access Control8.6 HighN/A0%Aug 18, 2026
CVE-2026-60698: Missing Authentication for Critical Function9.8 CriticalN/A1%Aug 18, 2026
CVE-2026-60693: Improper Access Control7.1 HighN/A0%Aug 18, 2026
CVE-2026-60682: Missing Authentication for Critical Function6.5 MediumN/A0%Aug 18, 2026
CVE-2026-60680: Improper Access Control8.1 HighN/A0%Aug 18, 2026
CVE-2026-60679: Improper Authentication7.5 HighN/A0%Aug 18, 2026
16651-16675 of 567647
‹›