The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-8988: On-Chip Debug and Test Interface With Improper Access Control6.8 Medium8.6 High0%Jul 21, 2026
CVE-2026-89889: Linux: In the Linux kernel, the following vulnerability has been resolved: media: i2c: imx415: Release runtime PM reference on…N/AN/AN/ASep 16, 2026
CVE-2026-89888: Linux: In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov02a10: fix endpoint parsing…7.8 HighN/AN/ASep 16, 2026
CVE-2026-89887: Linux: In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov7740: fix use-after-destroy in remove…7.8 HighN/AN/ASep 16, 2026
CVE-2026-89886: Linux: In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix async notifier cleanup leak…N/AN/AN/ASep 16, 2026
CVE-2026-89885: Linux: In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Fix SCP device…8.4 HighN/AN/ASep 16, 2026
CVE-2026-89884: Linux: In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed…N/AN/AN/ASep 16, 2026
CVE-2026-89883: Linux: In the Linux kernel, the following vulnerability has been resolved: media: rc: sunxi-cir: Unregister rc device on probe…7.8 HighN/AN/ASep 16, 2026
CVE-2026-89882: Linux: In the Linux kernel, the following vulnerability has been resolved: media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED…7.8 HighN/AN/ASep 16, 2026
CVE-2026-89881: Linux: In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: use…N/AN/AN/ASep 16, 2026
CVE-2026-89880: Linux: In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: release URBs and stream buffers…7.8 HighN/AN/ASep 16, 2026