The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-19694: Heap-based Buffer Overflow5.5 MediumN/A0%Aug 13, 2026
CVE-2026-19481: Improper Check for Unusual or Exceptional Conditions7.5 HighN/A0%Aug 13, 2026
CVE-2026-16459: Observable Timing DiscrepancyN/A5.9 Medium0%Aug 13, 2026
CVE-2026-16458: Observable Timing DiscrepancyN/A5.9 Medium0%Aug 13, 2026
CVE-2026-15413: Hidden Functionality10.0 CriticalN/A0%Aug 13, 2026
CVE-2026-14332: Missing Authorization5.4 MediumN/A0%Aug 13, 2026
CVE-2026-14298: Improper Handling of Highly Compressed Data (Data Amplification)6.5 MediumN/A0%Aug 13, 2026
CVE-2026-3639: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Aug 13, 2026
CVE-2026-11840: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A2%Aug 13, 2026
CVE-2026-18622: User Interface (UI) Misrepresentation of Critical Information5.5 MediumN/A0%Aug 13, 2026
CVE-2026-18146: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Aug 13, 2026
CVE-2026-3835: Improper Authorization5.3 MediumN/A0%Aug 13, 2026
CVE-2026-19088: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Aug 13, 2026
CVE-2026-18945: Authorization Bypass Through User-Controlled Key8.2 HighN/A0%Aug 13, 2026
CVE-2026-14213: Authorization Bypass Through User-Controlled Key3.7 LowN/A0%Aug 13, 2026
CVE-2026-14182: Improper Authentication9.8 CriticalN/A0%Aug 13, 2026
CVE-2026-13610: Improper Privilege Management7.5 HighN/A0%Aug 13, 2026
CVE-2026-13328: Improper Access Control5.3 MediumN/A0%Aug 13, 2026
CVE-2026-72506: Incorrectly Specified Destination in a Communication Channel5.4 Medium5.1 Medium0%Aug 13, 2026
CVE-2026-19182: Incorrect Authorization4.3 MediumN/A0%Aug 13, 2026
CVE-2026-19135: Use of Externally-Controlled Input to Select Classes or Code5.4 MediumN/A0%Aug 13, 2026
CVE-2026-18728: Integer Underflow (Wrap or Wraparound)6.5 MediumN/A0%Aug 13, 2026
CVE-2026-0301: Use of Uninitialized Resource7.5 High1.7 Low0%Aug 13, 2026
CVE-2026-0299: Untrusted Search Path7.8 High5.9 Medium0%Aug 13, 2026
CVE-2026-0298: Improper Control of Generation of Code8.1 High5.2 Medium0%Aug 13, 2026
19451-19475 of 788572
‹›