The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-55987: Incorrect Authorization8.1 HighN/A0%Aug 13, 2026
CVE-2026-55986: Improper Access Control5.4 MediumN/A0%Aug 13, 2026
CVE-2026-55984: Improper Access Control2.7 LowN/A0%Aug 13, 2026
CVE-2026-55982: Exposure of Sensitive Information to an Unauthorized Actor9.1 CriticalN/A0%Aug 13, 2026
CVE-2026-55402: Out-of-bounds Read5.9 Medium8.7 High0%Aug 13, 2026
CVE-2026-54481: Improper Certificate Validation7.5 HighN/A0%Aug 13, 2026
CVE-2026-50105: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Aug 13, 2026
CVE-2026-42931: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Aug 13, 2026
CVE-2026-24791: Incorrect Authorization8.1 HighN/A0%Aug 13, 2026
CVE-2026-24059: Improper Privilege Management6.5 MediumN/A0%Aug 13, 2026
CVE-2026-23603: Server-Side Request Forgery (SSRF)3.1 LowN/A0%Aug 13, 2026
CVE-2026-13051: Improper Neutralization of Special Elements Used in a Template Engine9.1 CriticalN/A0%Aug 13, 2026
CVE-2026-13048: Improper Neutralization of Directives in Dynamically Evaluated Code8.2 HighN/A0%Aug 13, 2026
CVE-2022-4993: Improper Neutralization of Special Elements Used in a Template Engine9.1 CriticalN/A0%Aug 13, 2026
CVE-2026-73671: URL Redirection to Untrusted Site6.1 Medium5.1 Medium0%Aug 13, 2026
CVE-2026-73670: Improper Neutralization of Special Elements used in an SQL Command7.2 High8.6 High0%Aug 13, 2026
CVE-2026-73576: Use of Predictable Algorithm in Random Number Generator6.5 MediumN/A0%Aug 13, 2026
CVE-2026-73575: Cross-Site Request Forgery (CSRF)3.5 LowN/A0%Aug 13, 2026
CVE-2026-73574: Incorrect Resource Transfer Between Spheres6.5 MediumN/A0%Aug 13, 2026
CVE-2026-73573: Path Traversal: '../filedir'6.5 MediumN/A0%Aug 13, 2026
CVE-2026-73572: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Aug 13, 2026
CVE-2026-73571: Incorrect Authorization4.3 MediumN/A0%Aug 13, 2026
CVE-2026-73570: Improper Neutralization of Special Elements used in an OS Command8.9 HighN/A32%Aug 13, 2026
CVE-2026-73559: Uncontrolled Resource Consumption6.5 MediumN/A0%Aug 13, 2026
CVE-2026-73533: Embedded Malicious Code9.8 Critical9.3 Critical0%Aug 13, 2026
19076-19100 of 691462
‹›