The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-89863: Undefined Security Weakness7.5 HighN/A1%Sep 16, 2026
CVE-2026-89862: Undefined Security WeaknessN/AN/A0%Sep 16, 2026
CVE-2026-89861: Undefined Security Weakness8.1 HighN/A1%Sep 16, 2026
CVE-2026-89860: Undefined Security Weakness8.8 HighN/A0%Sep 16, 2026
CVE-2026-89859: Undefined Security WeaknessN/AN/A0%Sep 16, 2026
CVE-2026-89858: Undefined Security WeaknessN/AN/A0%Sep 16, 2026
CVE-2026-89857: Undefined Security Weakness9.8 CriticalN/A1%Sep 16, 2026
CVE-2026-89856: Undefined Security Weakness8.4 HighN/A0%Sep 16, 2026
CVE-2026-89855: Undefined Security WeaknessN/AN/A0%Sep 16, 2026
CVE-2026-89854: Undefined Security Weakness7.8 HighN/A0%Sep 16, 2026
CVE-2026-89853: Undefined Security WeaknessN/AN/A0%Sep 16, 2026
CVE-2026-89852: Undefined Security WeaknessN/AN/A0%Sep 16, 2026
CVE-2026-89851: Undefined Security WeaknessN/AN/A0%Sep 16, 2026
CVE-2026-89850: Undefined Security WeaknessN/AN/A0%Sep 16, 2026
CVE-2026-89849: Undefined Security Weakness8.8 HighN/A0%Sep 16, 2026
CVE-2026-89848: Undefined Security Weakness8.1 HighN/A1%Sep 16, 2026
CVE-2026-89847: Undefined Security Weakness9.8 CriticalN/A1%Sep 16, 2026
CVE-2026-89846: Undefined Security Weakness9.1 CriticalN/A1%Sep 16, 2026
CVE-2026-89845: Undefined Security WeaknessN/AN/A0%Sep 16, 2026
CVE-2026-89844: Undefined Security Weakness8.8 HighN/A0%Sep 16, 2026
CVE-2026-89843: Undefined Security WeaknessN/AN/A0%Sep 16, 2026
CVE-2026-89842: Undefined Security WeaknessN/AN/A0%Sep 16, 2026
CVE-2026-89841: Undefined Security Weakness7.8 HighN/A0%Sep 16, 2026
CVE-2026-89840: Undefined Security Weakness7.1 HighN/A0%Sep 16, 2026
CVE-2026-89839: Undefined Security WeaknessN/AN/A0%Sep 16, 2026
2326-2350 of 430630
‹›