The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-0301: Use of Uninitialized Resource7.5 High1.7 Low0%Aug 13, 2026
CVE-2026-0299: Untrusted Search Path7.8 High5.9 Medium0%Aug 13, 2026
CVE-2026-0298: Improper Control of Generation of Code8.1 High5.2 Medium0%Aug 13, 2026
CVE-2026-0297: Out-of-bounds Write8.1 High5.2 Medium0%Aug 13, 2026
CVE-2026-0296: Improper Certificate Validation7.4 High4.5 Medium0%Aug 13, 2026
CVE-2026-0295: Concurrent Execution using Shared Resource with Improper Synchronization7.0 High4.1 Medium0%Aug 13, 2026
CVE-2026-0294: Uncontrolled Search Path Element7.8 High6.0 Medium0%Aug 13, 2026
CVE-2026-0293: Protection Mechanism Failure6.0 Medium5.6 Medium0%Aug 13, 2026
CVE-2026-0292: Authentication Bypass by Spoofing6.0 Medium2.1 Low0%Aug 13, 2026
CVE-2026-0291: Improper Link Resolution Before File Access4.4 Medium1.1 Low0%Aug 13, 2026
CVE-2026-0290: Insufficiently Protected Credentials5.5 Medium0.5 Low0%Aug 13, 2026
CVE-2026-0289: Insufficiently Protected Credentials6.5 Medium0.5 Low0%Aug 13, 2026
CVE-2026-50544: Creation of Temporary File in Directory with Insecure Permissions6.3 MediumN/A0%Aug 13, 2026
CVE-2026-49819: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Aug 13, 2026
CVE-2026-49473: Interpretation Conflict8.8 HighN/A0%Aug 13, 2026
CVE-2026-48791: Improper Verification of Cryptographic Signature2.0 LowN/A0%Aug 13, 2026
CVE-2026-46688: URL Redirection to Untrusted SiteN/A6.9 Medium0%Aug 13, 2026
CVE-2026-46382: Server-Side Request Forgery (SSRF)N/A8.7 High0%Aug 13, 2026
CVE-2026-17431: Improper Neutralization of Special Elements used in an OS Command6.1 MediumN/A1%Aug 13, 2026
CVE-2026-16770: Improper Neutralization of Argument Delimiters in a Command9.8 CriticalN/A0%Aug 13, 2026
CVE-2026-71194: Incorrect Resource Transfer Between Spheres6.8 MediumN/A0%Aug 12, 2026
CVE-2026-71193: Incorrect Authorization9.6 CriticalN/A0%Aug 12, 2026
CVE-2026-49481: Improper Neutralization of Special Elements used in an OS Command9.6 CriticalN/A1%Aug 12, 2026
CVE-2026-47718: Improper AuthenticationN/A5.5 Medium0%Aug 12, 2026
CVE-2026-47717: Insertion of Sensitive Information Into Sent Data7.5 HighN/A1%Aug 12, 2026
19776-19800 of 545471
‹›