The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-49226: Authorization Bypass Through User-Controlled Key8.3 HighN/A0%Aug 18, 2026
CVE-2026-49221: Authorization Bypass Through User-Controlled Key8.8 HighN/A0%Aug 18, 2026
CVE-2026-47245: Unchecked Return Value4.3 MediumN/A0%Aug 18, 2026
CVE-2026-46482: Not Failing Securely5.3 MediumN/A0%Aug 18, 2026
CVE-2026-45734: Improper Enforcement of a Single, Unique Action5.3 MediumN/A0%Aug 18, 2026
CVE-2026-45129: Cross-Site Request Forgery (CSRF)4.6 MediumN/A0%Aug 18, 2026
CVE-2026-45128: Cross-Site Request Forgery (CSRF)3.5 LowN/A0%Aug 18, 2026
CVE-2026-45127: Cross-Site Request Forgery (CSRF)3.5 LowN/A0%Aug 18, 2026
CVE-2026-45126: Cross-Site Request Forgery (CSRF)3.5 LowN/A0%Aug 18, 2026
CVE-2026-45125: Improper Neutralization of CRLF Sequences5.3 MediumN/A0%Aug 18, 2026
CVE-2026-45124: Missing Authorization4.3 MediumN/A0%Aug 18, 2026
CVE-2026-45123: Server-Side Request Forgery (SSRF)4.3 MediumN/A0%Aug 18, 2026
CVE-2026-45122: Incorrect Authorization4.3 MediumN/A0%Aug 18, 2026
CVE-2026-45121: Incorrect Authorization4.3 MediumN/A0%Aug 18, 2026
CVE-2026-45120: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Aug 18, 2026
CVE-2026-45119: Cross-Site Request Forgery (CSRF)4.6 MediumN/A0%Aug 18, 2026
CVE-2026-45118: Improper Neutralization of Script in Attributes in a Web Page9.3 CriticalN/A0%Aug 18, 2026
CVE-2026-45117: Improper Control of Generation of Code9.8 CriticalN/A1%Aug 18, 2026
CVE-2026-45116: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Aug 18, 2026
CVE-2026-45115: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Aug 18, 2026
CVE-2026-19501: Improper Neutralization of Formula Elements in a CSV File8.8 HighN/A0%Aug 18, 2026
CVE-2026-19500: Uncontrolled Resource Consumption7.5 HighN/A0%Aug 18, 2026
CVE-2026-15806: Cleartext Transmission of Sensitive InformationN/A6.0 Medium0%Aug 18, 2026
CVE-2026-12564: Server-Side Request Forgery (SSRF)9.6 CriticalN/A0%Aug 18, 2026
CVE-2026-75898: Server-Side Request Forgery (SSRF)8.5 High8.4 High0%Aug 18, 2026
16776-16800 of 567647
‹›