The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-74934: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Aug 18, 2026
CVE-2026-59781: Uncontrolled Search Path ElementN/A5.4 Medium0%Aug 18, 2026
CVE-2026-45532: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.7 High0%Aug 18, 2026
CVE-2026-23938: Uncaught ExceptionN/A2.1 Low0%Aug 18, 2026
CVE-2026-23937: Observable DiscrepancyN/A6.0 Medium0%Aug 18, 2026
CVE-2026-23935: Out-of-bounds ReadN/A6.8 Medium0%Aug 18, 2026
CVE-2026-23934: Asymmetric Resource Consumption (Amplification)N/A5.1 Medium0%Aug 18, 2026
CVE-2026-23933: Use of Hard-coded PasswordN/A7.7 High0%Aug 18, 2026
CVE-2026-23931: Observable DiscrepancyN/A5.3 Medium0%Aug 18, 2026
CVE-2026-23930: Asymmetric Resource Consumption (Amplification)7.5 High5.3 Medium0%Aug 18, 2026
CVE-2026-23929: Improperly Controlled Modification of Object Prototype Attributes5.4 Medium8.5 High0%Aug 18, 2026
CVE-2026-23922: Insufficiently Protected Credentials4.9 Medium2.1 Low0%Aug 18, 2026
CVE-2026-1199: Concurrent Execution using Shared Resource with Improper Synchronization3.7 Low6.9 Medium0%Aug 18, 2026
CVE-2026-18751: External Control of File Name or PathN/A5.2 Medium0%Aug 18, 2026
CVE-2026-16309: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Aug 18, 2026
CVE-2026-74961: Observable DiscrepancyN/AN/A0%Aug 18, 2026
CVE-2026-74983: Protection Mechanism FailureN/AN/A0%Aug 18, 2026
CVE-2026-75855: Improper Limitation of a Pathname to a Restricted Directory8.7 High8.4 High0%Aug 18, 2026
CVE-2026-75854: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Aug 18, 2026
CVE-2026-75853: Missing Authorization8.8 High8.7 High0%Aug 18, 2026
CVE-2026-75852: Missing Authentication for Critical Function9.8 Critical9.3 Critical0%Aug 18, 2026
CVE-2026-75851: Improper Privilege Management9.9 Critical9.4 Critical0%Aug 18, 2026
CVE-2026-75850: Missing Authorization4.2 Medium2.3 Low0%Aug 18, 2026
CVE-2026-75846: Missing Authorization7.1 High7.1 High0%Aug 18, 2026
CVE-2026-75845: Improper Privilege Management6.3 Medium5.3 Medium0%Aug 18, 2026
16901-16925 of 399392
‹›