The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-0295: Concurrent Execution using Shared Resource with Improper Synchronization7.0 High4.1 Medium0%Aug 13, 2026
CVE-2026-0294: Uncontrolled Search Path Element7.8 High6.0 Medium0%Aug 13, 2026
CVE-2026-0293: Protection Mechanism Failure6.0 Medium5.6 Medium0%Aug 13, 2026
CVE-2026-0292: Authentication Bypass by Spoofing6.0 Medium2.1 Low0%Aug 13, 2026
CVE-2026-0291: Improper Link Resolution Before File Access4.4 Medium1.1 Low0%Aug 13, 2026
CVE-2026-0290: Insufficiently Protected Credentials5.5 Medium0.5 Low0%Aug 13, 2026
CVE-2026-0289: Insufficiently Protected Credentials6.5 Medium0.5 Low0%Aug 13, 2026
CVE-2026-50544: Creation of Temporary File in Directory with Insecure Permissions6.3 MediumN/A0%Aug 13, 2026
CVE-2026-49819: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Aug 13, 2026
CVE-2026-49473: Interpretation Conflict8.8 HighN/A0%Aug 13, 2026
CVE-2026-48791: Improper Verification of Cryptographic Signature2.0 LowN/A0%Aug 13, 2026
CVE-2026-46688: URL Redirection to Untrusted SiteN/A6.9 Medium0%Aug 13, 2026
CVE-2026-46382: Server-Side Request Forgery (SSRF)N/A8.7 High0%Aug 13, 2026
CVE-2026-17431: Improper Neutralization of Special Elements used in an OS Command6.1 MediumN/A1%Aug 13, 2026
CVE-2026-16770: Improper Neutralization of Argument Delimiters in a Command9.8 CriticalN/A0%Aug 13, 2026
CVE-2026-71194: Incorrect Resource Transfer Between Spheres6.8 MediumN/A0%Aug 12, 2026
CVE-2026-71193: Incorrect Authorization9.6 CriticalN/A0%Aug 12, 2026
CVE-2026-49481: Improper Neutralization of Special Elements used in an OS Command9.6 CriticalN/A1%Aug 12, 2026
CVE-2026-47718: Improper AuthenticationN/A5.5 Medium0%Aug 12, 2026
CVE-2026-47717: Insertion of Sensitive Information Into Sent Data7.5 HighN/A1%Aug 12, 2026
CVE-2026-15424: Undefined Security WeaknessN/AN/AN/AAug 12, 2026
CVE-2026-15141: Origin Validation Error5.7 Medium5.3 Medium0%Aug 12, 2026
CVE-2026-7366: Concurrent Execution using Shared Resource with Improper Synchronization4.2 MediumN/A0%Aug 12, 2026
CVE-2026-73519: Use of Hard-coded Credentials9.8 Critical9.3 Critical1%Aug 12, 2026
CVE-2026-73501: Improper Authentication9.1 CriticalN/A0%Aug 12, 2026
19851-19875 of 545471
‹›