The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-19836: Authorization Bypass Through User-Controlled Key4.3 Medium2.1 Low0%Aug 14, 2026
CVE-2026-19835: Improper Access Control3.8 Low2.0 Low0%Aug 14, 2026
CVE-2026-19834: Authorization Bypass Through User-Controlled Key4.7 Medium2.0 Low0%Aug 14, 2026
CVE-2026-16772: Improper Privilege Management8.1 HighN/A0%Aug 14, 2026
CVE-2026-13198: Concurrent Execution using Shared Resource with Improper SynchronizationN/A5.9 Medium0%Aug 14, 2026
CVE-2026-13197: Concurrent Execution using Shared Resource with Improper SynchronizationN/A7.3 High0%Aug 14, 2026
CVE-2026-13196: Out-of-bounds WriteN/A7.3 High0%Aug 14, 2026
CVE-2026-13002: Loop with Unreachable Exit Condition4.4 MediumN/A0%Aug 14, 2026
CVE-2026-69101: Improper Restriction of XML External Entity Reference7.7 High8.3 High0%Aug 14, 2026
CVE-2026-58224: Missing Support for Integrity Check6.5 MediumN/A0%Aug 14, 2026
CVE-2026-19880: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.3 Medium0%Aug 14, 2026
CVE-2026-19879: Incorrect Conversion between Numeric Types5.3 MediumN/A0%Aug 14, 2026
CVE-2026-73633: Uncontrolled Resource Consumption7.5 HighN/A1%Aug 14, 2026
CVE-2026-53472: Improper Neutralization of Input During Web Page Generation6.3 MediumN/A0%Aug 14, 2026
CVE-2026-1621: Authentication Bypass by Primary Weakness5.3 MediumN/A0%Aug 14, 2026
CVE-2026-19871: Use of Hard-coded CredentialsN/A9.3 Critical0%Aug 14, 2026
CVE-2026-19830: Allocation of Resources Without Limits or Throttling5.3 Medium5.5 Medium0%Aug 14, 2026
CVE-2026-19829: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium2.1 Low0%Aug 14, 2026
CVE-2026-19828: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 Low0%Aug 14, 2026
CVE-2026-19827: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium5.5 Medium0%Aug 14, 2026
CVE-2026-19768: Improper Control of Generation of Code8.1 HighN/A0%Aug 14, 2026
CVE-2026-73673: Missing Authentication for Critical Function8.8 High8.7 High1%Aug 14, 2026
CVE-2026-19870: Authorization Bypass Through User-Controlled KeyN/A8.6 High0%Aug 14, 2026
CVE-2026-19826: Deserialization of Untrusted Data7.3 High5.5 Medium0%Aug 14, 2026
CVE-2026-19825: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Aug 14, 2026
18426-18450 of 612018
‹›