The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-72842: External Control of File Name or Path9.9 Critical9.4 Critical0%Aug 13, 2026
CVE-2026-72841: External Control of File Name or Path9.9 Critical9.4 Critical1%Aug 13, 2026
CVE-2026-72840: Incorrect Privilege Assignment8.8 High8.7 High0%Aug 13, 2026
CVE-2026-72839: Incorrect Privilege Assignment9.8 Critical9.3 Critical1%Aug 13, 2026
CVE-2026-72776: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Aug 13, 2026
CVE-2026-56865: Improper Verification of Cryptographic Signature8.4 HighN/A0%Aug 13, 2026
CVE-2026-56864: Improper Verification of Cryptographic Signature7.5 HighN/A0%Aug 13, 2026
CVE-2026-56862: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Aug 13, 2026
CVE-2026-56860: Inefficient Algorithmic Complexity5.9 MediumN/A1%Aug 13, 2026
CVE-2026-56859: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Aug 13, 2026
CVE-2026-56858: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 13, 2026
CVE-2026-56853: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Aug 13, 2026
CVE-2026-19752: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Aug 13, 2026
CVE-2026-19751: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Aug 13, 2026
CVE-2026-19750: Use of Hard-coded Password8.1 High8.2 High0%Aug 13, 2026
CVE-2026-33818: Uncontrolled Resource ConsumptionN/AN/A1%Aug 13, 2026
CVE-2026-8715: Files or Directories Accessible to External Parties9.6 CriticalN/A0%Aug 13, 2026
CVE-2026-73480: Improper Encoding or Escaping of Output5.0 Medium4.8 Medium0%Aug 13, 2026
CVE-2026-19749: Missing Authentication for Critical Function3.7 Low2.9 Low0%Aug 13, 2026
CVE-2026-19748: Insufficient Entropy3.7 Low2.9 Low0%Aug 13, 2026
CVE-2026-19483: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Aug 13, 2026
CVE-2026-19297: Improper Restriction of Excessive Authentication Attempts9.1 CriticalN/A0%Aug 13, 2026
CVE-2026-18741: Improper Neutralization of Input During Web Page Generation4.8 Medium4.6 Medium0%Aug 13, 2026
CVE-2026-18715: Improper Restriction of XML External Entity Reference6.5 MediumN/A0%Aug 13, 2026
CVE-2026-18671: Integer Overflow or Wraparound5.3 MediumN/A0%Aug 13, 2026
18576-18600 of 612018
‹›