The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-72822: Missing Authentication for Critical Function8.8 High8.7 High0%Aug 14, 2026
CVE-2026-72821: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Aug 14, 2026
CVE-2026-72820: Improper Limitation of a Pathname to a Restricted Directory4.9 Medium6.9 Medium0%Aug 14, 2026
CVE-2026-72819: Improper Control of Generation of Code8.8 High8.7 High1%Aug 14, 2026
CVE-2026-72817: Insufficient Verification of Data Authenticity6.5 Medium6.9 Medium0%Aug 14, 2026
CVE-2026-72816: Authentication Bypass by Spoofing6.5 Medium6.9 Medium0%Aug 14, 2026
CVE-2026-72815: Authentication Bypass by SpoofingN/A6.9 Medium0%Aug 14, 2026
CVE-2026-72814: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.3 Medium0%Aug 14, 2026
CVE-2026-72813: Uncaught ExceptionN/A6.9 Medium0%Aug 14, 2026
CVE-2026-72812: Missing Authorization6.5 Medium6.9 Medium0%Aug 14, 2026
CVE-2026-72811: Improper Neutralization of Special Elements used in an SQL Command10.0 Critical9.9 Critical0%Aug 14, 2026
CVE-2026-72810: Missing Authorization8.6 High9.2 Critical0%Aug 14, 2026
CVE-2026-19822: Stack-based Buffer Overflow8.8 High7.4 High1%Aug 14, 2026
CVE-2025-71405: URL Redirection to Untrusted SiteN/A5.1 Medium0%Aug 14, 2026
CVE-2026-19821: Buffer Copy without Checking Size of Input8.8 High7.4 High0%Aug 14, 2026
CVE-2026-19815: Stack-based Buffer Overflow8.8 High7.4 High0%Aug 14, 2026
CVE-2026-19814: Stack-based Buffer Overflow8.8 High7.4 High0%Aug 14, 2026
CVE-2026-19813: Stack-based Buffer Overflow8.8 High7.4 High1%Aug 14, 2026
CVE-2026-19812: Stack-based Buffer Overflow8.8 High7.4 High0%Aug 14, 2026
CVE-2026-19794: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 14, 2026
CVE-2026-19811: Stack-based Buffer Overflow8.8 High7.4 High0%Aug 14, 2026
CVE-2026-19617: Allocation of Resources Without Limits or Throttling5.5 MediumN/A0%Aug 14, 2026
CVE-2026-18039: Improper Privilege Management8.1 HighN/A0%Aug 14, 2026
CVE-2026-16810: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Aug 14, 2026
CVE-2026-16739: Improper Authentication5.9 MediumN/A0%Aug 14, 2026
18476-18500 of 612018
‹›