The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
CVE-2026-66066:KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails
CVE-2026-59309:Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)
CVE-2026-63077:Critical unauthenticated remote code execution in JetBrains TeamCity
CVE-2026-16232:Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild
CVE-2026-63030:wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core
CVE-2026-58644:Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild
TitleEitWModules
CVE-2026-10072: Unrestricted Upload of File with Dangerous Type7.2 High8.6 High0%May 29, 2026
CVE-2026-10071: Unrestricted Upload of File with Dangerous Type9.8 Critical9.3 Critical0%May 29, 2026
CVE-2026-7490: Unrestricted Upload of File with Dangerous Type7.2 High8.6 High0%May 2, 2026
CVE-2026-6885: Unrestricted Upload of File with Dangerous Type9.8 Critical9.3 Critical0%Apr 23, 2026
CVE-2026-2097: Unrestricted Upload of File with Dangerous Type8.8 High8.7 High0%Feb 10, 2026
CVE-2026-1331: Unrestricted Upload of File with Dangerous Type9.8 Critical9.3 Critical0%Jan 22, 2026
CVE-2026-1222: Unrestricted Upload of File with Dangerous Type7.2 High8.6 High0%Jan 20, 2026
CVE-2025-15240: Unrestricted Upload of File with Dangerous Type8.8 High8.7 High0%Jan 5, 2026
CVE-2025-15228: Unrestricted Upload of File with Dangerous Type9.8 Critical9.3 Critical0%Dec 29, 2025
CVE-2025-15226: Unrestricted Upload of File with Dangerous Type9.8 Critical9.3 Critical0%Dec 29, 2025
CVE-2025-12867: Unrestricted Upload of File with Dangerous Type7.2 High8.6 High0%Nov 10, 2025
CVE-2025-11948: Unrestricted Upload of File with Dangerous Type9.8 Critical9.3 Critical0%Oct 20, 2025
CVE-2025-11675: Unrestricted Upload of File with Dangerous Type7.2 High8.6 High0%Oct 13, 2025
CVE-2025-8323: Unrestricted Upload of File with Dangerous Type8.8 High8.7 High0%Jul 30, 2025
CVE-2025-7917: Unrestricted Upload of File with Dangerous Type7.2 High8.6 High0%Jul 21, 2025
CVE-2025-4561: Unrestricted Upload of File with Dangerous Type8.8 High8.7 High0%May 12, 2025
CVE-2025-4556: Unrestricted Upload of File with Dangerous Type9.8 Critical9.3 Critical1%May 12, 2025
CVE-2025-2396: Unrestricted Upload of File with Dangerous Type8.8 HighN/A1%Mar 17, 2025