The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-75104: Improper Limitation of a Pathname to a Restricted Directory5.5 Medium6.8 Medium0%Aug 17, 2026
CVE-2026-75103: Authorization Bypass Through User-Controlled Key8.8 High8.7 High0%Aug 17, 2026
CVE-2026-73560: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Aug 17, 2026
CVE-2026-73410: Time-of-check Time-of-use (TOCTOU) Race Condition8.5 HighN/A0%Aug 17, 2026
CVE-2026-71518: Incorrect Authorization7.5 High8.7 High0%Aug 17, 2026
CVE-2026-68765: Heap-based Buffer Overflow6.1 Medium5.2 Medium0%Aug 17, 2026
CVE-2026-67967: Stack-based Buffer Overflow9.8 CriticalN/A1%Aug 17, 2026
CVE-2026-67966: Missing Authentication for Critical Function9.8 CriticalN/A0%Aug 17, 2026
CVE-2026-67965: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Aug 17, 2026
CVE-2026-67926: Improper Control of Generation of Code9.8 CriticalN/A1%Aug 17, 2026
CVE-2026-67925: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 17, 2026
CVE-2026-67917: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Aug 17, 2026
CVE-2026-66795: Improper Certificate Validation9.9 CriticalN/A0%Aug 17, 2026
CVE-2026-65976: Uncontrolled Resource Consumption6.5 MediumN/A0%Aug 17, 2026
CVE-2026-65974: Improper Neutralization of Special Elements Used in a Template Engine9.9 CriticalN/A1%Aug 17, 2026
CVE-2026-65832: Out-of-bounds Read8.2 HighN/A0%Aug 17, 2026
CVE-2026-65822: Improper Neutralization of Special Elements used in an SQL Command7.6 HighN/A0%Aug 17, 2026
CVE-2026-65640: Unrestricted Upload of File with Dangerous Type8.8 HighN/A2%Aug 17, 2026
CVE-2026-64657: Improper Neutralization of Special Elements used in an SQL Command8.4 HighN/A0%Aug 17, 2026
CVE-2026-63409: Out-of-bounds Read8.2 HighN/A0%Aug 17, 2026
CVE-2026-54356: Missing Authorization7.1 HighN/A0%Aug 17, 2026
CVE-2026-54336: Improper Limitation of a Pathname to a Restricted Directory5.4 MediumN/A0%Aug 17, 2026
CVE-2026-47698: Improper Control of Dynamically-Managed Code Resources9.8 CriticalN/A1%Aug 17, 2026
CVE-2026-47686: Protection Mechanism Failure9.9 CriticalN/A0%Aug 17, 2026
CVE-2026-47683: Allocation of Resources Without Limits or ThrottlingN/A8.7 High0%Aug 17, 2026
17026-17050 of 612018
‹›