The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-75844: Server-Side Request Forgery (SSRF)7.1 High7.1 High0%Aug 18, 2026
CVE-2026-75843: Improper Privilege Management9.9 Critical9.4 Critical0%Aug 18, 2026
CVE-2026-75842: Improper Limitation of a Pathname to a Restricted Directory7.7 High8.3 High0%Aug 18, 2026
CVE-2026-75841: Allocation of Resources Without Limits or Throttling4.3 Medium5.3 Medium0%Aug 18, 2026
CVE-2026-75840: Comparison Using Wrong Factors7.5 High8.7 High0%Aug 18, 2026
CVE-2026-75839: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Aug 18, 2026
CVE-2026-75838: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Aug 18, 2026
CVE-2026-75837: Improper Privilege Management9.1 Critical9.3 Critical0%Aug 18, 2026
CVE-2026-75836: Missing Authorization8.8 High8.7 High0%Aug 18, 2026
CVE-2026-75835: Missing Authorization4.3 Medium9.3 Critical0%Aug 18, 2026
CVE-2026-75834: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Aug 18, 2026
CVE-2026-75833: URL Redirection to Untrusted Site4.2 Medium8.6 High0%Aug 18, 2026
CVE-2026-75832: Missing Authorization4.3 Medium9.3 Critical0%Aug 18, 2026
CVE-2026-75831: Improper Neutralization of Input During Web Page Generation7.6 High5.1 Medium0%Aug 18, 2026
CVE-2026-75830: External Control of File Name or Path7.1 High7.1 High0%Aug 18, 2026
CVE-2026-75829: Improper Neutralization of Special Elements Used in a Template Engine8.1 High8.6 High0%Aug 18, 2026
CVE-2026-75828: Improper Neutralization of Input During Web Page Generation8.7 High9.3 Critical0%Aug 18, 2026
CVE-2026-75827: Improper Control of Generation of Code8.8 High9.3 Critical1%Aug 18, 2026
CVE-2026-75774: Improper Authentication3.7 Low2.9 Low0%Aug 18, 2026
CVE-2026-75107: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Aug 18, 2026
CVE-2026-74908: Improper Neutralization of Input During Web Page Generation4.6 Medium5.1 Medium0%Aug 18, 2026
CVE-2026-74907: Improper Limitation of a Pathname to a Restricted Directory5.9 Medium8.2 High0%Aug 18, 2026
CVE-2026-74906: Incorrect Authorization7.5 High8.7 High0%Aug 18, 2026
CVE-2026-74905: Server-Side Request Forgery (SSRF)7.1 High6.9 Medium0%Aug 18, 2026
CVE-2026-74904: Missing Authorization7.5 High8.7 High0%Aug 18, 2026
16926-16950 of 484929
‹›