The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
CVE-2026-63520:Microsoft SharePoint Remote Code Execution (FIXED)
CVE-2026-55040:Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)
CVE-2026-63077:Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)
CVE-2026-18577:N-able N-central Authentication Bypass Exploited in the Wild
TitleEitWModules
CVE-2022-3075: Improper Input Validation9.6 CriticalN/A6%Sep 26, 2022
CVE-2022-30759: Incorrect Default Permissions8.8 HighN/A1%May 2, 2023
CVE-2022-30758: Incorrect Default Permissions4.0 MediumN/A0%Jul 11, 2022
CVE-2022-30757: Improper Authorization4.0 MediumN/A0%Jul 11, 2022
CVE-2022-30756: Improper Input Validation8.5 HighN/A0%Jul 11, 2022
CVE-2022-30755: Improper Authentication7.3 HighN/A0%Jul 11, 2022
CVE-2022-30754: Improper Input Validation8.5 HighN/A0%Jul 11, 2022
CVE-2022-30753: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A0%Jul 11, 2022
CVE-2022-30752: Improper Access Control3.3 LowN/A0%Jul 11, 2022
CVE-2022-30751: Improper Access Control3.3 LowN/A0%Jul 11, 2022
CVE-2022-30750: Improper Access Control3.3 LowN/A0%Jul 11, 2022