The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-8989: On-Chip Debug and Test Interface With Improper Access Control6.8 Medium8.6 High0%Jul 21, 2026
CVE-2026-89899: Linux: In the Linux kernel, the following vulnerability has been resolved: media: cec: disable delayed work before freeing an…7.8 HighN/AN/ASep 16, 2026
CVE-2026-89898: Linux: In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check…8.8 HighN/AN/ASep 16, 2026
CVE-2026-89897: Linux: In the Linux kernel, the following vulnerability has been resolved: media: cec: Serialize exclusive follower delivery…7.5 HighN/AN/ASep 16, 2026
CVE-2026-89896: Linux: In the Linux kernel, the following vulnerability has been resolved: media: cedrus: fix memory leak in…N/AN/AN/ASep 16, 2026
CVE-2026-89895: Linux: In the Linux kernel, the following vulnerability has been resolved: media: cobalt: Avoid freeing ALSA private data…N/AN/AN/ASep 16, 2026
CVE-2026-89894: Linux: In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: reject geometry changes while the…7.8 HighN/AN/ASep 16, 2026
CVE-2026-89893: Linux: In the Linux kernel, the following vulnerability has been resolved: media: cx23885: cancel NetUP CI work before…7.8 HighN/AN/ASep 16, 2026
CVE-2026-89892: Linux: In the Linux kernel, the following vulnerability has been resolved: media: em28xx: defer audio-only extension…N/AN/AN/ASep 16, 2026
CVE-2026-89891: Linux: In the Linux kernel, the following vulnerability has been resolved: media: em28xx: fix use-after-free of…N/AN/AN/ASep 16, 2026
CVE-2026-89890: Linux: In the Linux kernel, the following vulnerability has been resolved: media: go7007: defer the ALSA v4l2 put until card…7.8 HighN/AN/ASep 16, 2026