The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-32333: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Aug 18, 2026
CVE-2026-28571: Missing Authorization7.5 HighN/A0%Aug 18, 2026
CVE-2026-28570: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Aug 18, 2026
CVE-2026-28569: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Aug 18, 2026
CVE-2026-28568: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Aug 18, 2026
CVE-2026-28567: Missing Authorization7.5 HighN/A0%Aug 18, 2026
CVE-2026-28192: Unrestricted Upload of File with Dangerous Type9.6 CriticalN/A0%Aug 18, 2026
CVE-2026-28191: Incorrect Privilege Assignment8.8 HighN/A0%Aug 18, 2026
CVE-2026-24301: Improper Neutralization of Special Elements used in a Command7.5 HighN/A3%Aug 18, 2026
CVE-2026-17084: Interpretation ConflictN/A6.0 Medium1%Aug 18, 2026
CVE-2026-75874: Protection Mechanism Failure10.0 CriticalN/A0%Aug 18, 2026
CVE-2026-75783: Stack-based Buffer Overflow9.6 Critical8.6 High0%Aug 18, 2026
CVE-2026-75778: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 18, 2026
CVE-2026-74990: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A1%Aug 18, 2026
CVE-2026-74989: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A0%Aug 18, 2026
CVE-2026-74988: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A0%Aug 18, 2026
CVE-2026-74987: Improper Restriction of Operations within the Bounds of a Memory Buffer9.8 CriticalN/A1%Aug 18, 2026
CVE-2026-74986: Exposure of Sensitive Information to an Unauthorized Actor9.1 CriticalN/A0%Aug 18, 2026
CVE-2026-74985: Improper Privilege Management9.8 CriticalN/A0%Aug 18, 2026
CVE-2026-74984: Concurrent Execution using Shared Resource with Improper Synchronization6.8 MediumN/A0%Aug 18, 2026
CVE-2026-74982: Uncontrolled Resource Consumption7.5 HighN/A0%Aug 18, 2026
CVE-2026-74981: Origin Validation Error8.1 HighN/A0%Aug 18, 2026
CVE-2026-74980: Improper Restriction of Rendered UI Layers or Frames6.5 MediumN/A0%Aug 18, 2026
CVE-2026-74979: Improper Access Control9.8 CriticalN/A0%Aug 18, 2026
CVE-2026-74978: Improper Restriction of Rendered UI Layers or Frames8.1 HighN/A0%Aug 18, 2026
16851-16875 of 400147
‹›