The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Module TitleCheck MethodPlatformTypeDisclosure Date
SPIP X-Spip-Filtre Unauthenticated RCE
LinuxUnix
exploitAug 20, 2026
Tenable Security Center SCAP Audit File Command Injection
LinuxUnix
exploitAug 13, 2026
Tenable Security Center Report Charting RCE
LinuxUnix
exploitAug 13, 2026
Forgejo Arbitrary File Read via Org-mode Include
auxiliaryJul 30, 2026
Ruby on Rails Active Storage Vips Arbitrary File Read and Remote Code Execution
LinuxRubyUnix
exploitJul 29, 2026
JetBrains TeamCity Agent Polling Unauthenticated Remote Code Execution
LinuxUnixWindows
exploitJul 27, 2026
Check Point SmartConsole Authentication Bypass Run Script RCE
PythonUnix
exploitJul 22, 2026
WordPress Core wp2shell Unauthenticated SQL Injection via REST Batch Route Confusion
auxiliaryJul 17, 2026
Langflow AI auto_login RCE
Python
exploitJul 17, 2026
WordPress WP2Shell REST API Batch Route Confusion SQLi to RCE
LinuxPHPUnix
exploitJul 17, 2026
Ray Dashboard Logs API Path Traversal
auxiliaryJul 15, 2026
SonicWall SMA1000 WorkPlace wsproxy SSRF Remote Command Execution
LinuxUnix
exploitJul 14, 2026
Wordpress Planyo Online Reservation System Arbitrary File Read (CVE-2026-3576)
auxiliaryJul 10, 2026
Flowise MCP Server Remote Code Execution
Unix
exploitJun 23, 2026
Joomla Content Editor Unauthenticated File Upload RCE
PHP
exploitJun 5, 2026
HP Poly Voice Unauthenticated Remote Code Execution
Unix
exploitJun 1, 2026
Concrete CMS Unauthenticated File Usage Disclosure
auxiliaryMay 21, 2026
PAN-OS GlobalProtect CAS CVE-2026-0265 Vulnerability Checker
auxiliaryMay 21, 2026
Drupal Core PostgreSQL EntityQuery SQL Injection
auxiliaryMay 20, 2026
Fragnesia LPE (CVE-2026-46300)
LinuxUnix
exploitMay 14, 2026
Linux Kernel __ptrace_may_access() Exit Race chage File Disclosure
Linux
postMay 14, 2026
xfrm-ESP Page-Cache Write via CVE-2026-43284
LinuxUnix
exploitMay 8, 2026
rxkad Page-Cache Write via CVE-2026-43500
LinuxUnix
exploitMay 8, 2026
Cisco Catalyst SD-WAN Controller vHub Authentication Bypass
auxiliaryMay 7, 2026
Dalfox Found-Action Deserialization RCE
LinuxUnix
exploitMay 7, 2026
1-25 of 7162