The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-19917: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Aug 15, 2026
CVE-2026-74767: Unrestricted Upload of File with Dangerous TypeN/A8.7 High0%Aug 15, 2026
CVE-2026-74764: Improper Limitation of a Pathname to a Restricted DirectoryN/A10.0 Critical0%Aug 15, 2026
CVE-2026-73055: Improper Encoding or Escaping of Output4.8 Medium6.3 Medium0%Aug 15, 2026
CVE-2026-73054: Improper Authentication7.5 High8.7 High0%Aug 15, 2026
CVE-2026-73053: Improper Neutralization of Input During Web Page Generation9.0 Critical9.4 Critical0%Aug 15, 2026
CVE-2026-73052: Improper Neutralization of Input During Web Page Generation9.0 Critical9.4 Critical0%Aug 15, 2026
CVE-2026-73050: Improper Neutralization of Input During Web Page Generation9.0 Critical9.4 Critical0%Aug 15, 2026
CVE-2026-73047: Exposure of Sensitive Information to an Unauthorized Actor6.2 Medium8.6 High0%Aug 15, 2026
CVE-2026-73046: Improper Restriction of Excessive Authentication Attempts9.8 Critical9.3 Critical0%Aug 15, 2026
CVE-2026-73045: Improper Restriction of Excessive Authentication Attempts7.5 High8.7 High0%Aug 15, 2026
CVE-2026-73044: Improper Neutralization of Input During Web Page Generation9.0 Critical9.4 Critical0%Aug 15, 2026
CVE-2026-73043: Improper Neutralization of Input During Web Page Generation9.0 Critical9.4 Critical0%Aug 15, 2026
CVE-2026-73042: Improper Neutralization of Input During Web Page Generation9.0 Critical9.4 Critical0%Aug 15, 2026
CVE-2026-73041: Improper Neutralization of Input During Web Page Generation9.0 Critical9.4 Critical0%Aug 15, 2026
CVE-2026-19916: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Aug 15, 2026
CVE-2026-19906: Insufficient Entropy3.7 Low6.3 Medium0%Aug 15, 2026
CVE-2026-19905: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 15, 2026
CVE-2026-18855: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A1%Aug 15, 2026
CVE-2026-19904: Improper Neutralization of Input During Web Page Generation2.4 Low1.9 Low0%Aug 15, 2026
CVE-2026-19903: Files or Directories Accessible to External Parties5.3 Medium5.5 Medium0%Aug 15, 2026
CVE-2026-19901: Use of Hard-coded Credentials8.1 High8.2 High0%Aug 15, 2026
CVE-2026-19598: Incorrect Authorization9.8 CriticalN/A3%Aug 15, 2026
CVE-2026-19900: Use of Hard-coded Credentials8.1 High8.2 High2%Aug 15, 2026
CVE-2026-19899: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 15, 2026
17376-17400 of 512190
‹›