The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
CVE-2026-76461:Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Blog ↗CVE details
CVE-2026-85706:Critical GitLab Path Traversal Exploited in the Wild
Blog ↗CVE details
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
TitleEitWModules
CVE-2026-93565: Red Hat: A flaw was found in Netty RtspDecoder7.5 HighN/A0%Sep 18, 2026
CVE-2026-53957: Server-Side Request Forgery (SSRF)7.7 HighN/A0%Sep 15, 2026
CVE-2026-79394: Initialization of a Resource with an Insecure Default7.5 HighN/A0%Sep 11, 2026
CVE-2026-38998: Use After Free6.5 MediumN/A0%Sep 9, 2026
CVE-2026-85150: NULL Pointer Dereference7.5 HighN/A1%Sep 3, 2026
CVE-2026-56718: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High1%Aug 30, 2026
CVE-2026-18279: Buffer Copy without Checking Size of Input8.8 HighN/A0%Aug 20, 2026
CVE-2026-75619: Heap-based Buffer Overflow5.7 Medium6.9 Medium0%Aug 19, 2026
CVE-2026-75618: NULL Pointer Dereference6.5 Medium7.1 High0%Aug 19, 2026
CVE-2026-49420: Stack-based Buffer Overflow8.8 HighN/A0%Aug 19, 2026
CVE-2026-19749: Missing Authentication for Critical Function3.7 Low2.9 Low0%Aug 13, 2026
CVE-2025-70962: Improper Access Control7.5 HighN/A0%Aug 5, 2026
CVE-2026-12935: Stack-based Buffer OverflowN/A8.7 High1%Jul 29, 2026
CVE-2026-51606: Improper Input Validation7.5 HighN/A0%Jul 9, 2026
CVE-2026-51605: Stack-based Buffer Overflow7.5 HighN/A1%Jul 9, 2026
CVE-2026-51604: Stack-based Buffer Overflow7.5 HighN/A1%Jul 9, 2026
CVE-2026-51603: Stack-based Buffer Overflow7.5 HighN/A1%Jul 9, 2026
CVE-2026-51602: Stack-based Buffer Overflow7.5 HighN/A1%Jul 9, 2026
CVE-2026-51601: Stack-based Buffer Overflow7.5 HighN/A1%Jul 9, 2026
CVE-2026-51600: Uncontrolled Resource Consumption7.5 HighN/A1%Jul 9, 2026
CVE-2026-51599: Improper Input Validation9.8 CriticalN/A1%Jul 9, 2026
CVE-2026-51598: Improper Input Validation6.5 MediumN/A0%Jul 9, 2026
CVE-2026-51597: Authentication Bypass by Capture-replay9.1 CriticalN/A1%Jul 9, 2026
CVE-2026-57749: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Jul 2, 2026
CVE-2026-57880: Stack-based Buffer Overflow9.8 CriticalN/A1%Jun 26, 2026
1-25 of 206
›