The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM
Blog ↗CVE details
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
TitleEitWModules
CVE-2006-6608: Undefined Security Weakness7.3 HighN/A3%Dec 18, 2006
CVE-2006-6301: Undefined Security Weakness5.3 MediumN/A2%Dec 6, 2006
CVE-2006-6302: Undefined Security Weakness5.3 MediumN/A2%Dec 6, 2006
CVE-2006-6243: Undefined Security WeaknessN/AN/A1%Dec 4, 2006
CVE-2006-5794: Undefined Security Weakness8.4 HighN/A3%Nov 8, 2006
CVE-2006-5484: Undefined Security Weakness5.3 MediumN/A1%Oct 24, 2006
CVE-2006-5229: Exposure of Sensitive Information to an Unauthorized Actor9.1 CriticalN/A58%Oct 10, 2006
CVE-2006-4925: Undefined Security Weakness7.5 HighN/A15%Sep 29, 2006
CVE-2006-5051: Double Free8.1 HighN/A45%Sep 27, 2006
CVE-2006-5052: Undefined Security Weakness5.3 MediumN/A3%Sep 27, 2006
CVE-2006-4924: Undefined Security Weakness7.5 HighN/A38%Sep 27, 2006
CVE-2006-4440: Undefined Security Weakness7.3 HighN/A8%Aug 29, 2006
CVE-2006-4441: Undefined Security Weakness7.3 HighN/A3%Aug 29, 2006
CVE-2006-4316: Undefined Security Weakness7.8 HighN/A0%Aug 23, 2006
CVE-2006-4315: Undefined Security WeaknessN/AN/A0%Aug 23, 2006
CVE-2006-0393: Undefined Security Weakness4.8 MediumN/A2%Aug 3, 2006
CVE-2006-3631: Undefined Security Weakness5.3 MediumN/A2%Jul 18, 2006
CVE-2006-3470: Undefined Security WeaknessN/AN/A2%Jul 10, 2006
CVE-2006-2421: Undefined Security WeaknessN/AN/A3%May 17, 2006
CVE-2006-2407: Improper Restriction of Operations within the Bounds of a Memory Buffer7.3 HighN/A71%May 16, 2006
CVE-2006-1283: Undefined Security Weakness8.4 HighN/A0%Mar 23, 2006
CVE-2006-1320: Undefined Security WeaknessN/AN/A2%Mar 20, 2006
CVE-2006-1206: Undefined Security Weakness7.5 HighN/A12%Mar 14, 2006
CVE-2006-0883: Undefined Security Weakness5.3 MediumN/A2%Mar 7, 2006
CVE-2006-0705: Use of Externally-Controlled Format String6.3 MediumN/A10%Feb 15, 2006
1826-1850 of 1974
‹›