The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-53800: Improper Link Resolution Before File Access4.7 Medium5.7 Medium0%Aug 13, 2026
CVE-2026-53799: Improper Link Resolution Before File Access6.3 Medium7.2 High0%Aug 13, 2026
CVE-2026-53798: Incorrect Type Conversion or Cast5.3 Medium6.9 Medium0%Aug 13, 2026
CVE-2026-53797: Improper Link Resolution Before File Access4.7 Medium5.7 Medium0%Aug 13, 2026
CVE-2026-53796: Improper Link Resolution Before File Access6.3 Medium5.8 Medium0%Aug 13, 2026
CVE-2026-53795: Improper Link Resolution Before File Access8.1 High7.2 High0%Aug 13, 2026
CVE-2026-53794: Improper Validation of Specified Quantity in Input5.3 Medium6.9 Medium0%Aug 13, 2026
CVE-2026-53793: Improper Link Resolution Before File Access7.4 High9.1 Critical0%Aug 13, 2026
CVE-2026-53792: Improper Validation of Array Index6.5 Medium7.1 High0%Aug 13, 2026
CVE-2026-53791: Authentication Bypass by Spoofing9.1 Critical9.1 Critical1%Aug 13, 2026
CVE-2026-53790: Improper Neutralization of Special Elements used in an OS Command8.1 High9.2 Critical1%Aug 13, 2026
CVE-2026-53789: Reliance on Untrusted Inputs in a Security Decision8.1 High7.1 High0%Aug 13, 2026
CVE-2026-53788: Improper Neutralization of CRLF Sequences6.5 Medium6.9 Medium0%Aug 13, 2026
CVE-2026-53786: Incorrect Authorization6.5 Medium6.9 Medium0%Aug 13, 2026
CVE-2026-53785: Improper Link Resolution Before File Access7.1 High6.9 Medium0%Aug 13, 2026
CVE-2026-53784: Improper Link Resolution Before File Access7.1 High8.4 High0%Aug 13, 2026
CVE-2026-53783: Improper Link Resolution Before File Access8.1 High8.6 High0%Aug 13, 2026
CVE-2026-49857: Server-Side Request Forgery (SSRF)7.4 HighN/A0%Aug 13, 2026
CVE-2026-49856: Server-Side Request Forgery (SSRF)4.3 MediumN/A0%Aug 13, 2026
CVE-2026-49820: URL Redirection to Untrusted Site4.7 MediumN/A0%Aug 13, 2026
CVE-2026-28154: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Aug 13, 2026
CVE-2026-19734: Authorization Bypass Through User-Controlled KeyN/A8.6 High0%Aug 13, 2026
CVE-2026-19293: Weak Password Requirements8.8 HighN/A0%Aug 13, 2026
CVE-2026-19292: Authentication Bypass by Primary Weakness8.8 HighN/A0%Aug 13, 2026
CVE-2026-19291: Authentication Bypass by Spoofing8.8 HighN/A0%Aug 13, 2026
19151-19175 of 691462
‹›