The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-73056: Improper Restriction of Excessive Authentication Attempts9.8 Critical9.3 Critical0%Aug 16, 2026
CVE-2026-72888: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Aug 16, 2026
CVE-2026-72887: Selection of Less-Secure Algorithm During Negotiation9.8 CriticalN/A1%Aug 16, 2026
CVE-2026-19349: Authentication Bypass by Primary Weakness9.8 CriticalN/A0%Aug 16, 2026
CVE-2024-58375: Exposure of Sensitive System Information to an Unauthorized Control Sphere7.5 High8.7 High0%Aug 16, 2026
CVE-2026-74251: Improper Neutralization of Special Elements used in an SQL CommandN/A9.3 Critical0%Aug 16, 2026
CVE-2026-74578: Undefined Security Weakness7.1 HighN/A0%Aug 16, 2026
CVE-2024-13784: Deserialization of Untrusted Data9.8 CriticalN/A1%Aug 16, 2026
CVE-2026-2497: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Aug 16, 2026
CVE-2026-2357: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 16, 2026
CVE-2026-18347: Missing Authorization4.3 MediumN/A0%Aug 16, 2026
CVE-2026-17608: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Aug 16, 2026
CVE-2026-17604: Improper Limitation of a Pathname to a Restricted Directory4.9 MediumN/A1%Aug 16, 2026
CVE-2026-17087: Missing Authorization7.5 HighN/A0%Aug 16, 2026
CVE-2026-13424: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 16, 2026
CVE-2026-12998: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Aug 16, 2026
CVE-2026-10734: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 16, 2026
CVE-2026-9767: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Aug 16, 2026
CVE-2026-2283: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Aug 16, 2026
CVE-2026-19934: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 16, 2026
CVE-2026-19728: Missing Authorization7.5 HighN/A0%Aug 16, 2026
CVE-2026-19726: Incorrect Authorization6.5 MediumN/A0%Aug 16, 2026
CVE-2026-19725: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A0%Aug 16, 2026
CVE-2026-19717: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Aug 16, 2026
CVE-2026-19714: Improper Authentication9.1 CriticalN/A0%Aug 16, 2026
17301-17325 of 512190
‹›