The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-75004: Improper Neutralization of Special Elements used in a Command4.3 MediumN/A0%Aug 17, 2026
CVE-2026-75003: Incorrect Resource Transfer Between Spheres9.8 CriticalN/A0%Aug 17, 2026
CVE-2026-75002: Improper Neutralization of Special Elements used in a Command7.1 HighN/A1%Aug 17, 2026
CVE-2026-75000: Incorrect Resource Transfer Between Spheres5.8 MediumN/A0%Aug 17, 2026
CVE-2026-74999: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Aug 17, 2026
CVE-2026-74998: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 17, 2026
CVE-2026-74997: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Aug 17, 2026
CVE-2026-70412: Remanent Data Readable after Memory Erase3.5 LowN/A0%Aug 17, 2026
CVE-2026-18674: Insufficient Verification of Data AuthenticityN/A7.0 High0%Aug 17, 2026
CVE-2026-16467: Missing Authorization7.5 HighN/A0%Aug 17, 2026
CVE-2026-14564: Insufficiently Protected Credentials9.0 CriticalN/A0%Aug 17, 2026
CVE-2026-74843: Stack-based Buffer Overflow10.0 Critical9.3 Critical1%Aug 17, 2026
CVE-2026-40126: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Aug 17, 2026
CVE-2026-74901: Improper Verification of Cryptographic Signature9.8 Critical9.3 Critical0%Aug 17, 2026
CVE-2026-74900: Unchecked Error Condition9.8 Critical9.3 Critical0%Aug 17, 2026
CVE-2026-74899: Improper Neutralization of Directives in Dynamically Evaluated Code9.8 Critical9.3 Critical0%Aug 17, 2026
CVE-2026-74896: Protection Mechanism Failure9.8 Critical9.3 Critical0%Aug 17, 2026
CVE-2026-74895: Protection Mechanism Failure9.8 Critical9.3 Critical0%Aug 17, 2026
CVE-2026-74894: Improper Authentication9.8 Critical9.3 Critical0%Aug 17, 2026
CVE-2026-74893: Use of Hard-coded Credentials8.8 High8.7 High0%Aug 17, 2026
CVE-2026-74892: Use of Hard-coded Credentials7.5 High8.7 High0%Aug 17, 2026
CVE-2026-74891: Use of Hard-coded Credentials9.8 Critical8.7 High0%Aug 17, 2026
CVE-2026-74890: Insufficient Verification of Data Authenticity5.5 Medium9.3 Critical0%Aug 17, 2026
CVE-2026-74889: Inadequate Encryption Strength9.8 Critical9.3 Critical0%Aug 17, 2026
CVE-2026-74888: Use of a Broken or Risky Cryptographic Algorithm7.5 High8.7 High0%Aug 17, 2026
17176-17200 of 612018
‹›