The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-15312: Improper Privilege Management8.8 HighN/A0%Aug 15, 2026
CVE-2026-15303: Improper Authentication9.8 CriticalN/A0%Aug 15, 2026
CVE-2026-15162: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Aug 15, 2026
CVE-2026-15001: Improper Privilege Management8.8 HighN/A0%Aug 15, 2026
CVE-2026-14484: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A1%Aug 15, 2026
CVE-2026-14433: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 15, 2026
CVE-2026-12128: Improper Input Validation5.3 MediumN/A0%Aug 15, 2026
CVE-2026-74250: Sensitive Information in Resource Not Removed Before Reuse6.3 MediumN/A0%Aug 14, 2026
CVE-2026-74247: Server-Side Request Forgery (SSRF)7.1 HighN/A0%Aug 14, 2026
CVE-2026-74245: Missing Authentication for Critical Function7.5 HighN/A0%Aug 14, 2026
CVE-2026-74244: Improper Verification of Cryptographic Signature7.5 HighN/A0%Aug 14, 2026
CVE-2026-74243: Missing Authentication for Critical Function8.2 HighN/A0%Aug 14, 2026
CVE-2026-74242: Authorization Bypass Through User-Controlled Key4.4 MediumN/A0%Aug 14, 2026
CVE-2026-74241: Improper Neutralization of Special Elements used in an LDAP Query6.5 MediumN/A0%Aug 14, 2026
CVE-2026-74240: Improper Authentication5.4 MediumN/A0%Aug 14, 2026
CVE-2026-63650: Improper Certificate ValidationN/A2.0 Low0%Aug 14, 2026
CVE-2026-63649: Permissive List of Allowed InputsN/A4.1 Medium0%Aug 14, 2026
CVE-2026-18932: Undefined Security WeaknessN/AN/AN/AAug 14, 2026
CVE-2026-73683: Authentication Bypass by Capture-replay8.1 High9.2 Critical0%Aug 14, 2026
CVE-2026-69414: Improper Access Control7.8 HighN/A1%Aug 14, 2026
CVE-2026-74248: Incorrect Authorization4.3 MediumN/A0%Aug 14, 2026
CVE-2026-73682: Undefined Security WeaknessN/A8.7 High2%Aug 14, 2026
CVE-2026-71570: Improper Access ControlN/A5.1 Medium0%Aug 14, 2026
CVE-2026-67366: Cross-Site Request Forgery (CSRF)N/A5.3 Medium0%Aug 14, 2026
CVE-2026-50523: Improper Neutralization of Special Elements used in a Command7.8 HighN/A0%Aug 14, 2026
18301-18325 of 512190
‹›